coredns-https
coredns-https copied to clipboard
Add support for client certificate from Windows cert store
This PR adds support for using mTLS with client certificates from the Windows certificate store.
It adds a new config directive tls_certstore which allows you to specify which store and cert to use. The format is
tls_certstore user|system software|platform store issuer intermediate_issuer
for example
https . 1.2.3.4/dns-query {
tls
tls_certstore "user" "software" "My" "Company Internal Authority" ""
}
or:
https . 1.2.3.4/dns-query {
tls
tls_certstore "system" "platform" "My" "Company Intermediate Authority" "Company Root Authority"
}
This feature is only built on Windows and behaviour on other platforms are unchanged.