Skip to content

TLS: Choose client certificate from Windows Certstore via OID #11148

@pkqsun

Description

@pkqsun

Is your feature request related to a problem? Please describe.

This request is an extension for #11004 and #11009.

tls.windows.certstore_name: Root
tls.windows.use_enterprise_store: false
tls.windows.client_thumbprints:

I know in upcoming release, maybe 4.1.2 or 4.2.0 next week, above parameter will take effect to support reading Windows Certstore in Output plugin.
However, in our case, the client certificate on Windows will expire after 6 month and then it will be auto renewed, after that the client_thumbprints will change.
With above client_thumbprints parameter, we need to change the value before it is expired endlessly.

Describe the solution you'd like

There is another field could be used to choose one specific certificate named OID which will not be changed after renewal.
For Microsoft CertSrv Infrastructure, we use https://oidref.com/1.3.6.1.4.1.311.21.
So I would like to request to suport this type of parameter such as:
tls.windows.client_OID: <x.x.x.x...>

Thanks~

Describe alternatives you've considered

Additional context

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions