Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Certificate based auth

See original GitHub issue

Azure AD app registrations show two credential mechanisms in Azure Portal: client secret (supported today with clientSecret) and certificate. It would be great to support both. in this GitHub Action.

I’m envisioning a clientCertificate property where the content is the base64 encoded certificate content (PEM/PFX).

The benefit of this approach is that certificates are a strong form of credential than client secret and many organizations allow a longer rotation period for certificates than secrets (which are much like passwords).

Issue Analytics

State:
Created 2 years ago
Reactions:4
Comments:11

Top GitHub Comments

3reactions

charlie-normandcommented, May 24, 2021

The benefit of this approach is that certificates are a strong form of credential than client secret and many organizations allow a longer rotation period for certificates than secrets (which are much like passwords).

Some organisations insist on certificate auth, except by exception (a convoluted process in an enterprise). Would be great to have this so we can start using Github actions

1reaction

LauraFoulquiercommented, Sep 23, 2021

Hey @tulsishell, I have updated the URL, but in a nutshell:

Convert your pfx certificate to .pem format. It should give you a “readable” file
Copy the text from your .pem to a GitHub secret (plain text)

Top Results From Across the Web

What is Certificate-based Authentication? - GlobalSign

Certificate -based Authentication (CBA) uses a digital certificate, acquired via cryptography, to identify a user, machine or device before granting access ...

Overview of Azure AD certificate-based authentication

Azure AD certificate-based authentication (CBA) enables customers to allow or require users to authenticate directly with X.509 certificates ...

How does certificate-based authentication work?

Certificate -based authentication is a cryptographic technique that allows one computer to securely identify itself to another across a network connection, ...

Certificate-based authentication - IBM

Certificate -based authentication is based on what the user has, which is the user's private key, and what the user knows, which is...

Introduction to Certificate-based Authentication

Certificate -based authentication is generally considered preferable to password-based authentication because it is based on what the user has, the private key, ...