microsoft/garnet

PEM format cert for TLS

Open

#1 433 ouverte le 11 nov. 2025

Voir sur GitHub
 (1 commentaire) (0 réactions) (0 assignés)C# (11 827 stars) (660 forks)batch import
help wanted

Description

Feature request type

enhancement

Is your feature request related to a problem? Please describe

The security docs on the website specifies PKCS12 for TLS certificate format. https://microsoft.github.io/garnet/docs/security

PEM is more widely used in Unix systems including Linux, so it'd be great if that can be supported as well.

Describe the solution you'd like

Be able to use .pem plain text files for TLS certificates.

Describe alternatives you've considered

No response

Additional context

No response

Guide contributeur

Stack technique
csharp
Domaine
backendsecurity
Type d'issue
feature
DifficultéDifficulté estimée pour un nouveau contributeur, de 1 pour un très petit changement à 5 pour un travail expert.
3
Temps estiméFourchette de temps approximative pour investiguer, implémenter, tester et préparer une pull request.
half day
Statut d'activitéDisponibilité apparente de l'issue : fraîche, active, ancienne, bloquée ou en attente d'un mainteneur.
fresh
ClartéClarté avec laquelle l'issue explique le changement attendu, les critères d'acceptation et la prochaine étape.
mostly clear
Prérequis
Basic understanding of TLS certificatesFamiliarity with PEM and PKCS12 formatsC# development experience
Accessibilité débutantScore de 1 à 100 estimant l'accessibilité de cette issue pour un premier contributeur.
45
Direction de recherche
Investigate how Garnet currently loads TLS certificates from PKCS12 format as documented in the security docs (https://microsoft.github.io/garnet/docs/security). Look for the TLS setup code that parses certificate files, likely in the Garnet server or networking layer. Determine if there is an existing abstraction for certificate loading that could be extended to support PEM files. Check for any existing usage of .pem or related libraries like System.Security.Cryptography.X509Certificates. If no clear abstraction exists, propose one that reads PEM plain text and converts to X509Certificate2. Consider cross platform compatibility, as PEM is common on Unix systems.