microsoft / msquic

Cross-platform, C implementation of the IETF QUIC protocol, exposed to C, C++, C# and Rust.

MIT License

3.92k stars 525 forks source link

Add support for PKCS12 & PKCS7 certificate formats to Schannel TLS #1453

Open wfurt opened 3 years ago

wfurt commented 3 years ago

1351 added option to load certificate from ASN.1 encoded buffer and #1450 allows to export peer certificate(s) in ASN.1 form as well.

While there is no pressing need for this on Windows with Schannel, it would be nice to get parity for anybody who does not want to or cannot use platform pointers.

nibanks commented 2 years ago

@wfurt what is the priority here? Is this a requirement for .NET 7?

wfurt commented 2 years ago

low. We don't plan to support portable certificates (to OpenSsl) on Windows AFAIK. cc: @manickap

nibanks commented 1 year ago

Long term, we want to standardize on OpenSSL instead of adding features like this to Schannel. @wfurt any issue with closing this in favor of that long term direction?

wfurt commented 1 year ago

From my perspective this is only for completeness. for schannel we use native pointers. So I think this is ok to close regardless of the OpenSSL.