709385cbaa
Some checks failed
NATS Server Tests / Lint (push) Failing after 3s
NATS Server Tests / Build (Latest Go) (push) Has been skipped
NATS Server Tests / Build (Minimum Go) (push) Has been skipped
NATS Server Tests / Build (Minimum Go, windows-2022) (push) Has been skipped
NATS Server Tests / Build (Minimum Go, windows-2025) (push) Has been skipped
NATS Server Tests / Test Stores (push) Has been skipped
NATS Server Tests / Test JetStream (push) Has been skipped
NATS Server Tests / Test Raft (push) Has been skipped
NATS Server Tests / Test JetStream Consumers (push) Has been skipped
NATS Server Tests / Test JetStream Cluster 1 (push) Has been skipped
NATS Server Tests / Test JetStream Cluster 2 (push) Has been skipped
NATS Server Tests / Test JetStream Cluster 3 (push) Has been skipped
NATS Server Tests / Test JetStream Cluster 4 (push) Has been skipped
NATS Server Tests / Test JetStream Supercluster (push) Has been skipped
NATS Server Tests / Test No-Race 1 (push) Has been skipped
NATS Server Tests / Test No-Race 2 (push) Has been skipped
NATS Server Tests / Test MQTT (push) Has been skipped
NATS Server Tests / Test Message Tracing (push) Has been skipped
NATS Server Tests / Test JWT (push) Has been skipped
NATS Server Tests / Test Remaining Server Tests (push) Has been skipped
NATS Server Tests / Test Other Packages (push) Has been skipped
Vulnerability Scan / govulncheck (push) Failing after 12m2s
26 lines
1.2 KiB
Markdown
26 lines
1.2 KiB
Markdown
# PKCS12 Files
|
|
|
|
Refresh PKCS12 files when test certificates and keys (PEM files) are refreshed (e.g. expiry workflow)
|
|
|
|
- `client.p12` is a p12/pfx packaging of `client.pem` and `client-key.pem`
|
|
|
|
`openssl pkcs12 -export -inkey ./client-key.pem -in ./client.pem -out client.p12`
|
|
|
|
To add the CA, use the following:
|
|
|
|
`openssl pkcs12 -export -nokeys -in ..\ca.pem -out ca.p12`
|
|
|
|
> Note: set the PKCS12 bundle password to `s3cr3t` as required by provisioning scripts
|
|
|
|
## Cert Store Provisioning Scripts
|
|
|
|
Windows cert store supports p12/pfx bundle for certificate-with-key import. Windows cert store tests will execute
|
|
a Powershell script to import relevant PKCS12 bundle into the Windows store before the test. Equivalent to:
|
|
|
|
`powershell.exe -command "& '..\test\configs\certs\tlsauth\certstore\import-<client,server>-p12.ps1'"`
|
|
|
|
The `delete-cert-from-store.ps1` script deletes imported certificates from the Windows store (if present) that can
|
|
cause side-effects and impact the validity of different use tests.
|
|
|
|
> Note: Tests are configured for "current user" store context. Execute tests with appropriate Windows permissions
|
|
> (e.g. as Admin) if adding tests with "local machine" store context specified. |