Skip to content

Conversation

ZetaTwo
Copy link

@ZetaTwo ZetaTwo commented Dec 3, 2024

This PR adds support for using mTLS with client certificates from the Windows certificate store.

It adds a new config directive tls_certstore which allows you to specify which store and cert to use. The format is

tls_certstore user|system software|platform store issuer intermediate_issuer

for example

https . 1.2.3.4/dns-query {
    tls
    tls_certstore "user" "software" "My" "Company Internal Authority" ""
}

or:

https . 1.2.3.4/dns-query {
    tls
    tls_certstore "system" "platform" "My" "Company Intermediate Authority" "Company Root Authority"
}

This feature is only built on Windows and behaviour on other platforms are unchanged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant