I'd like to add the following to today's agenda: 1...
# officehours
v
I'd like to add the following to today's agenda: 1. Securing client mTLS certificate/key in system keystore (such as macOS keychain) • For macOS, most secure approach is to use Apple API to create TLS handshake signature without extracting the private key: https://developer.apple.com/documentation/security/1643916-seckeycreatesignature?language=objc • As an alternative/quicker fix, as a security-minded user, I would like to pass TLS client certificate and private key to osquery as ENV variable instead of a file 2. I would like to get a review and merge of performance stats PR https://github.com/osquery/osquery/pull/8239 before I start working on another performance stats issue: https://github.com/osquery/osquery/issues/7694