Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding TLS Cert Pinning to SFS public endpoint #74

Closed
wants to merge 5 commits into from

Conversation

arthuraraujo-msft
Copy link
Contributor

Closes #42

Adding TLS Cert Pinning to the public key of the SFS endpoint.

  • Using CURLOPT_PINNEDPUBLICKEY to set the pinned key.
    • Extracted the sha256 public key of the public endpoint api.cdp.microsoft.com using the method indicated in the webpage above.
  • Added override SFS_TEST_OVERRIDE_PUBLIC_KEY which is used in tests and in the tool in case one wants to use other URLs without the same pinned key.

@arthuraraujo-msft arthuraraujo-msft requested a review from a team as a code owner February 20, 2024 21:57
@arthuraraujo-msft
Copy link
Contributor Author

A comment was made during the sync meeting asking if this cert we're pinning is the intermediate cert, and for how long it will be valid. I'll look into that before pushing this.

@arthuraraujo-msft arthuraraujo-msft marked this pull request as draft February 21, 2024 18:05
@shishirb-MSFT
Copy link

A comment was made during the sync meeting asking if this cert we're pinning is the intermediate cert, and for how long it will be valid. I'll look into that before pushing this.

+1, let's not hurry such a change. Can you create a design doc and get it reviewed? This feature is not a must for v1 IMO.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Connection: Cert pinning with service
2 participants