Skip to content

Add support for client certificate from Windows cert store #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

ZetaTwo
Copy link

@ZetaTwo ZetaTwo commented Dec 3, 2024

This PR adds support for using mTLS with client certificates from the Windows certificate store.

It adds a new config directive tls_certstore which allows you to specify which store and cert to use. The format is

tls_certstore user|system software|platform store issuer intermediate_issuer

for example

https . 1.2.3.4/dns-query {
    tls
    tls_certstore "user" "software" "My" "Company Internal Authority" ""
}

or:

https . 1.2.3.4/dns-query {
    tls
    tls_certstore "system" "platform" "My" "Company Intermediate Authority" "Company Root Authority"
}

This feature is only built on Windows and behaviour on other platforms are unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant