[enhancement]: AzurePowerShell@5 Support SNI (Subject Name + Issuer) validation / pass -SendCertificateChain?

microsoft / azure-pipelines-tasks

Tasks for Azure Pipelines

https://aka.ms/tfbuild

MIT License

3.47k stars 2.61k forks source link

[enhancement]: AzurePowerShell@5 Support SNI (Subject Name + Issuer) validation / pass -SendCertificateChain? #19917

Open cutecycle opened 3 months ago

cutecycle commented 3 months ago

Task name

Applies to all tasks using VstsAzureHelpers:

Specifically:

AzurePowerShell@5

Describe your feature request here

We would like to perform deployment tasks with SN+I authentication. However, it seems like AzurePowerShell's call to Connect-AzAccount doesn't pass -SendCertificateChain, and the chain is needed for Issuer to be resolved.

Details on SendCertificateChain: https://github.com/Azure/azure-powershell/discussions/16886

cutecycle commented 3 months ago

See, similarily: #19912