Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE REQUEST] support for either keystore or input stream option for ActiveDirectoryServicePrincipalCertificate authentication #2556

Open
muskaan62 opened this issue Dec 6, 2024 · 0 comments
Assignees
Labels
Enhancement An enhancement to the driver. Lower priority than bugs.

Comments

@muskaan62
Copy link

Is your feature request related to a problem? If so, please give a short summary of the problem and how the feature would resolve it

Currently, the driver only supports specifying the physical file path for certificates and keys. This approach poses significant challenges when the application is hosted in a cloud environment, as it requires maintaining a separate copy of the certificate and key on each machine where the application is deployed. This not only increases operational complexity but also introduces potential security risks and management overhead for keeping the files across all instances

Describe the preferred solution

Adding support to pass the certificate and private key through a keystore would greatly enhance the application's security and flexibility. By utilizing a keystore, it eliminates the need to manage physical file paths for certificates and keys, especially in cloud environments. This approach centralizes the management of credentials, reduces operational complexity, and improves security by leveraging standardized mechanisms for storing and accessing sensitive information.

Describe alternatives you've considered

Currently, we are blocked because the driver does not support either stream inputs or keystore options for handling the client certificate and private key. This limitation forces reliance on physical file paths, which is challenging to manage in scalable cloud deployments. Adding support for either stream inputs or keystore integration would significantly enhance flexibility and security by enabling in-memory handling of sensitive credentials or centralized management through a keystore. This improvement would simplify deployment and reduce operational complexity.

@github-project-automation github-project-automation bot moved this to To be triaged in MSSQL JDBC Dec 6, 2024
@muskaan62 muskaan62 changed the title [FEATURE REQUEST] support for keystore option for ActiveDirectoryServicePrincipalCertificate authentication [FEATURE REQUEST] support for either keystore or input stream option for ActiveDirectoryServicePrincipalCertificate authentication Dec 6, 2024
@machavan machavan added the Enhancement An enhancement to the driver. Lower priority than bugs. label Dec 6, 2024
@Jeffery-Wasty Jeffery-Wasty moved this from To be triaged to Backlog in MSSQL JDBC Dec 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement An enhancement to the driver. Lower priority than bugs.
Projects
Status: Backlog
Development

No branches or pull requests

3 participants