chocolatey / chocolatey/choco

Use the Windows Certificate Store for authenticating sources using certificates

Open
#3,136 1 comment 0 reactions 0 assignees View on GitHub
0 - Backlog Enhancement
Dominant language
C#
Stars
11.5k
Forks
960
PR merge metrics
No merged PRs in 30d

Description

### Checklist

- [X] I have verified this is the correct repository for opening this issue.
- [X] I have verified no other issues exist related to my request.

### Is Your Feature Request Related To A Problem? Please describe.

Currently certificate based auth with Chocolatey sources requires a PFX file to be placed on disk and the path provided, along with an optional PFX Passphrase. We could look to use the Windows Certificate store to provide for Certificate based authentication

### Describe The Solution. Why is it needed?

Deploying a file for a certificate-based auth solution is cumbersome in comparison to the tooling that exists on Windows to provide certificates to server and client endpoints. This provides far less administrative overhead, and will potentially make Chocolatey sources that require cert-based authentication to function easier to manage; particularly if we can point to a Certificate store item by SubjectName rather than Thumbprint (This would make it more "set it and forget it").

### Additional Context

Originally raised by @steviecoaster.

### Related Issues

- [ZenDesk Ticket](https://chocolatey.zendesk.com/agent/tickets/17502)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.