microsoft/garnet

PEM format cert for TLS

Open

#1,433 opened on Nov 11, 2025

View on GitHub
 (1 comment) (0 reactions) (0 assignees)C# (11,827 stars) (660 forks)batch import
help wanted

Description

Feature request type

enhancement

Is your feature request related to a problem? Please describe

The security docs on the website specifies PKCS12 for TLS certificate format. https://microsoft.github.io/garnet/docs/security

PEM is more widely used in Unix systems including Linux, so it'd be great if that can be supported as well.

Describe the solution you'd like

Be able to use .pem plain text files for TLS certificates.

Describe alternatives you've considered

No response

Additional context

No response

Contributor guide

Tech stack
csharp
Domain
backendsecurity
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Basic understanding of TLS certificatesFamiliarity with PEM and PKCS12 formatsC# development experience
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
45
Research direction
Investigate how Garnet currently loads TLS certificates from PKCS12 format as documented in the security docs (https://microsoft.github.io/garnet/docs/security). Look for the TLS setup code that parses certificate files, likely in the Garnet server or networking layer. Determine if there is an existing abstraction for certificate loading that could be extended to support PEM files. Check for any existing usage of .pem or related libraries like System.Security.Cryptography.X509Certificates. If no clear abstraction exists, propose one that reads PEM plain text and converts to X509Certificate2. Consider cross platform compatibility, as PEM is common on Unix systems.