Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secrets SDK: Add ability to load client certs from OS cert storage #2325

Open
adam-wolfe opened this issue Oct 29, 2024 · 3 comments
Open

Secrets SDK: Add ability to load client certs from OS cert storage #2325

adam-wolfe opened this issue Oct 29, 2024 · 3 comments
Labels
community-upvoted enhancement New feature or request priority-medium Not functioning - next quarter if capacity permits
Milestone

Comments

@adam-wolfe
Copy link
Contributor

adam-wolfe commented Oct 29, 2024

Is your feature or enhancement request related to a problem or limitation? Please describe

Currently, Zowe CLI and Explorer for VS Code support using client certificates to authenticate to z/OSMF and the Zowe API ML. This implementation does not (as I understand it) support loading certs from the certificate storage facilities built into the user's operating system.

Describe your enhancement idea

Enhance the Secrets SDK to enable users to specify paths to certificates within the OS certificate store. I am not sure what this means for Linux users, but on MacOS it would require interacting with the keychain, and on Windows this would require interacting with the Windows certificate store.

The end goal would be for Zowe CLI and Zowe Explorer for VS Code users to be able to specify the path and name of the certificate (to retrieve the certificate from the OS cert store) to use for authenticating in their z/OSMF and API ML(nested/base) profiles.

Describe alternatives you've considered

Provide any additional context

@adam-wolfe adam-wolfe added enhancement New feature or request new The issue wasn't triaged yet labels Oct 29, 2024
Copy link

Thank you for raising this enhancement request.
The community has 90 days to vote on it.
If the enhancement receives at least 5 upvotes, it is added to our development backlog.
If it receives fewer votes, the issue is closed.

@shameemk
Copy link

This is a much needed feature on our site. We have Microsoft keystore having staff authentication holding zOS hostidMapping . This is used for sso for zosMF at the moment. With this enhancement we hope we can use this same method for zowe explorer and cli logins

@JTonda JTonda added priority-medium Not functioning - next quarter if capacity permits and removed new The issue wasn't triaged yet labels Nov 4, 2024
@RedGoldPhoenix
Copy link

Hello
@adam-wolfe That is a great idea. Thank you very much for opening this issue.
As @shameemk explained "This is a much needed feature on our site" ;)
Could you please develop this new feature? It would help us a lot.
Best regards

@adam-wolfe adam-wolfe added this to the V3.1.0 milestone Nov 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
community-upvoted enhancement New feature or request priority-medium Not functioning - next quarter if capacity permits
Projects
Status: Medium Priority
Development

No branches or pull requests

5 participants