Comments (3)
Hi @strossan,
It is not possible to read PKCS#12 bundles with this exporter for now, only PEM encoded X.509 certificates are supported.
I'm interested about new use cases and would like to evaluate if this could be implemented.
Would you mind telling more about the typical environment where you encounter these files? What platform and software stack if they are commonly known tools. This is only out of curiosity because as maintainers of this project we don't see many PKCS files these days, especially not on systems where the x509-certificate-exporter is deployed.
Thank you
from x509-certificate-exporter.
We started to implement Kubernetes environments recently. We, for the moment, use Azure Kubernetes Services (AKS). Part of our process, we create keyvaults in Azure, so we can encrypt values for various SaaS we use and pass the information to our micro services. It happens to be done with PKCS#12.
I put the request because it could be something you support or may want to support down the road. Thanks for considering it.
from x509-certificate-exporter.
Hi,
Implementing support for PKCS#12 has been evaluated a couple times. When working on version 3 we investigated what libraries could be used, as the standard golang library barely provide interfaces for this format.
We ultimately decided not to support PKCS#12.
Friction points are:
- unsatisfactory standard library and wish not to depend on large crypto packages
- conflicts on how to handle both formats: probing files doesn't feel like a clean method, and the remaining choice is to significantly refactor code and command-line arguments
- PKCS#12 bundles are more complex and raise problems we didn't have to handle with PEM blobs. We don't want to purposely ignore corner cases.
- likely risk of having to alter metrics specifications
So eventually we will only support PEM for the time being. Design choices have been made on these premises and it keeps things simple and easier to maintain.
from x509-certificate-exporter.
Related Issues (20)
- Prometheus and x509.yml files HOT 1
- Permission denied when trying to monitor etcd certificates HOT 8
- Feature: bundle dashboard with helm-chart HOT 3
- Failure to parse k3s kubeconfig HOT 4
- Daemonset for CP has no pods
- Feature request: Include a label with host/nodename for Helm installs when using Podannotations HOT 1
- [Feature request] - Support parsing and thereby alerting on CRL/DER data HOT 4
- Queston: Do include/exclude parameters accept wildcard notation?
- Feature request: Enhance shutdown function to accept context for improved control
- Is it possible to use this exporter to monitor PEM files within each pod? HOT 2
- `grafana-piechart-panel` grafana plugin is deprecated
- fingerprint / serial_number as metric-label
- 如何修改 labels 中的 instance,我想去掉端口号
- Add possibility to scan ConfigMaps in addition to Secrets HOT 1
- Cannot deploy Helm charts as Chart.yaml versions are "0.0.0"
- Bump versions to eliminate CVEs: golang.org/x/net golang.org/x/net HOT 4
- metrics endpoint always shows DOWN
- CI doesn't push the `latest` tag anymore HOT 2
- Move out from internal packages to allow import
- Exporter use a lot of memory when scraping secrets from k8s, which leads to OOM sometimes. HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from x509-certificate-exporter.