[FEATURE REQUEST] support for either keystore or input stream option for ActiveDirectoryServicePrincipalCertificate authentication #2556
Labels
Enhancement
An enhancement to the driver. Lower priority than bugs.
Is your feature request related to a problem? If so, please give a short summary of the problem and how the feature would resolve it
Currently, the driver only supports specifying the physical file path for certificates and keys. This approach poses significant challenges when the application is hosted in a cloud environment, as it requires maintaining a separate copy of the certificate and key on each machine where the application is deployed. This not only increases operational complexity but also introduces potential security risks and management overhead for keeping the files across all instances
Describe the preferred solution
Adding support to pass the certificate and private key through a keystore would greatly enhance the application's security and flexibility. By utilizing a keystore, it eliminates the need to manage physical file paths for certificates and keys, especially in cloud environments. This approach centralizes the management of credentials, reduces operational complexity, and improves security by leveraging standardized mechanisms for storing and accessing sensitive information.
Describe alternatives you've considered
Currently, we are blocked because the driver does not support either stream inputs or keystore options for handling the client certificate and private key. This limitation forces reliance on physical file paths, which is challenging to manage in scalable cloud deployments. Adding support for either stream inputs or keystore integration would significantly enhance flexibility and security by enabling in-memory handling of sensitive credentials or centralized management through a keystore. This improvement would simplify deployment and reduce operational complexity.
The text was updated successfully, but these errors were encountered: