forderud / WindowsClientAuth

Windows examples of certificates for client authentication in web and TLS socket scenarios
MIT License
3 stars 0 forks source link

Use Windows certificate store in Python sample #10

Open forderud opened 2 years ago

forderud commented 2 years ago

Python truststore issue: https://github.com/sethmlarson/truststore/issues/78

The WebClient.py sample script currently relies on loading the client certificate (incl. private key) from a file instead of the Windows certificate store. This makes it incompatible with secure TPM-based storage of the private key.

Resources

It seems like Python 3.10 includes improvements in this area that will hopefully enable direct usage of the Windows certificate store (see https://sethmlarson.dev/blog/experimental-python-3.10-apis-and-trust-stores).

Python SSL sources:

OpenSSL sources: