Skip to content

Add support for client certificate from Windows cert store#9

Open
ZetaTwo wants to merge 2 commits intov-byte-cpu:mainfrom
ZetaTwo:certtostore
Open

Add support for client certificate from Windows cert store#9
ZetaTwo wants to merge 2 commits intov-byte-cpu:mainfrom
ZetaTwo:certtostore

Conversation

@ZetaTwo
Copy link

@ZetaTwo ZetaTwo commented Dec 3, 2024

This PR adds support for using mTLS with client certificates from the Windows certificate store.

It adds a new config directive tls_certstore which allows you to specify which store and cert to use. The format is

tls_certstore user|system software|platform store issuer intermediate_issuer

for example

https . 1.2.3.4/dns-query {
    tls
    tls_certstore "user" "software" "My" "Company Internal Authority" ""
}

or:

https . 1.2.3.4/dns-query {
    tls
    tls_certstore "system" "platform" "My" "Company Intermediate Authority" "Company Root Authority"
}

This feature is only built on Windows and behaviour on other platforms are unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant