Certificate StoreLocation is hardcoded to CurrentUser

microsoft / SPID-and-Digital-Identity-Enabler

This repo contains the SPIDProxy code and several ADFS/Azure B2C related scripts and assets. SPIDProxy allows to communicate with SPID, CIE and eIDAS. The repo also contains a web app enabling CNS authentication through ADFS and AAD B2C.

MIT License

27 stars 12 forks source link

Certificate StoreLocation is hardcoded to CurrentUser #26

Closed fume closed 2 years ago

fume commented 2 years ago

The certificate StoreLocation is hardcoded to CurrentUser, hence not configurable. This is fine on Azure App Service but could lead to problems on IIS especially when using AppPoolIdentity.

https://github.com/microsoft/SPID-and-Digital-Identity-Enabler/blob/88ff3d84234c582dca9f288089b7df5e4ad4c31d/WebApps/CNS.Auth.Web/Startup.cs#L74