Join Slack
Powered by
I'd like to add the following to today's agenda: 1...
# officehours
v
Victor Lyuboslavsky
01/16/2024, 1:44 PM
I'd like to add the following to today's agenda: 1. Securing client mTLS certificate/key in system keystore (such as macOS keychain) • For macOS, most secure approach is to use Apple API to create TLS handshake signature without extracting the private key:
https://developer.apple.com/documentation/security/1643916-seckeycreatesignature?language=objc
• As an alternative/quicker fix, as a security-minded user, I would like to pass TLS client certificate and private key to osquery as ENV variable instead of a file 2. I would like to get a review and merge of performance stats PR
https://github.com/osquery/osquery/pull/8239
before I start working on another performance stats issue:
https://github.com/osquery/osquery/issues/7694
Open in Slack
Previous
Next