Call a gRPC server over TLS or mutual TLS
Click the lock in the toolbar and turn on Enable TLS. With no CA file istek trusts the macOS system store; for a private CA choose its PEM file, and for mutual TLS add a client certificate and key.
Updated
Server with a public certificate
- Click the lock in the toolbar.
- Turn on Enable TLS. Leave Use system trust store when no CA file is set on.
- Click Done, then Connect.
Private CA, or mutual TLS
- In the same sheet, choose your CA's PEM file under CA certificate (PEM).
- If the server asks for a client certificate, choose the certificate and key under Client certificate + key (PEM, optional).
- Click Done, then Connect.
Self-signed development servers
Insecure: skip certificate verification makes istek accept any certificate. While it is on, a red banner stays at the top of the window and cannot be dismissed, so it is never left on by accident. Prefer choosing the dev CA file: it keeps the check and removes the warning.
Tokens and other metadata
Add authorization and other headers under Metadata Headers. Mark a value as secret and it is stored in the macOS Keychain; the workspace file keeps only a reference, so it is safe to keep in a synced folder.