Search certificates in MS store not only by THUMB and SUBJ
milosz.engel last edited by
We are playing with MS PKI, pfSense/OpenVpn config and almost everything is working good. I just wanted to make sure and maybe propose little upgrade. Since OpenVpn Windows client uses cryptoapi for fetching certificates we would like to be able to utilize all search options and not only subject and thumb.
This would greatly improved profile deployment since we would have one ovpn config file(or maybe this could be done in different manner?).
For example only specific key usage or template id would be searched in order to return only one, specific cert specially crafted for VPN connections.
Am I missing something or this could be incorporated in future releases?