microsoft/msquic

Support in-memory certificate stores

开放

#4,951 创建于 2025年3月27日

 (2 条评论) (0 个反应) (0 位负责人)C (686 个派生)github user discovery
Area: APIArea: Coreexternalfeature requestgood first issue

仓库指标

星标
 (4,764 个星标)
PR 合并指标
 (平均合并 6天) (30 天内合并 40 个 PR)

描述

Describe the feature you'd like supported

I've been evaluating MsQuic and haven't used it, but already see a problem that would complicate usage: there isn't a way to use a certificate store that is in-memory. Custom certificate stores must be in a disk file. There are use cases where this is a problem.

Proposed solution

Both SChannel and OpenSSL can support this. See libcurl code:

SChannel: https://github.com/curl/curl/blob/0c20e9bf1a5cc7318f85e70212505856bb5f0e72/lib/vtls/schannel_verify.c#L122 OpenSSL: https://github.com/curl/curl/blob/0c20e9bf1a5cc7318f85e70212505856bb5f0e72/lib/vtls/openssl.c#L3021

I think this can already be done manually in SChannel using QUIC_CREDENTIAL_CONFIG::CertificateContext essentially the same way that libcurl does it.

Additional context

No response

贡献者指南