Client ID #

Every application wishing to interact with AcraServer should provide an identifier called client ID. Based on the client ID, AcraServer will choose corresponding encryption keys to process client requests.

To pass client ID from application to AcraServer you should make AcraServer derive identifier from client TLS certificate. Also, one can avoid doing it and set static client ID with --client_id flag to Acra.

For AcraTranslator, however, there is one more method: specifying client ID inside RPC requests. This behavior is controlled by --acratranslator_client_id_from_connection_enable flag.

TLS certificate #

When AcraServer or AcraTranslator is launched with --tls_client_id_from_cert flag, client IDs will be derived from TLS certificates provided by the client during handshake.

The exact behavior will also depend on value from --tls_identifier_extractor_type flag, see its description for more on that.