Certificate auth - #66
Merged
Merged
Conversation
added 9 commits
August 14, 2026 23:57
Added --clientCertificatePath and --clientCertificateKeyPath CLI options for mTLS. Updated HttpBehaviorBinder, SocketBehavior, and related classes to load and process client certificates from PEM files. Modified command factories and execution plan logic to propagate certificate parameters through all HTTP and perf flows. Updated HTTP handler to attach client certificates to outgoing requests. #65
Centralized client certificate loading in LoadCertificate helper, supporting PEM/PFX and Windows PKCS#12. Updated usage in HttpBehaviorBinder and CHttpExt. Enhanced SocketsHandler to enable TLS 1.2/1.3. Added new test cert files and improved client cert tests. Removed unused Certificate package. Allowed extra Kestrel config and improved async usage.
Executor now loads PEM and PFX client certificates, using X509CertificateLoader for PFX and platform-specific logic for Windows. Test dependencies (xunit.runner.visualstudio, xunit.v3.mtp-v2, Microsoft.NET.Test.Sdk) are updated. PEM cert/key files are added to test output. Tests are updated to verify new cert variables, and a new integration test covers PEM client cert usage.
Added support for client certificate authentication via new metadata fields and updated native bindings. Improved HTTP syntax highlighting and restricted metadata value patterns. Updated .NET dependencies, removed Linux binaries, and cleaned up obsolete files.
Added enableColoring parameter to StringConsole for optional color output. Updated GetDiffAsync to use coloring. Fixed redundant condition and improved extension checking in LoadCertificate. Changed native module filename in extension.js. Updated CHttp.exe and CHttpExtension.node binaries.
Update target frameworks to include .NET 9.0 in CHttp and CHttpExtension projects. Add conditional compilation for certificate export: use ExportPkcs12 with Pkcs12ExportPbeParameters.Default for .NET 10.0+, and Export with X509ContentType.Pkcs12 for earlier versions. Bump Microsoft.JavaScript.NodeApi and Generator packages from 0.9.23 to 0.9.25.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
#65