{"action":"created","issue":{"url":"https://api.github.com/repos/masterzen/winrm/issues/28","labels_url":"https://api.github.com/repos/masterzen/winrm/issues/28/labels{/name}","comments_url":"https://api.github.com/repos/masterzen/winrm/issues/28/comments","events_url":"https://api.github.com/repos/masterzen/winrm/issues/28/events","html_url":"https://github.com/masterzen/winrm/pull/28","id":95703731,"number":28,"title":"CertAuth support","user":{"login":"claudiu-coblis","id":12471044,"avatar_url":"https://avatars.githubusercontent.com/u/12471044?v=3","gravatar_id":"","url":"https://api.github.com/users/claudiu-coblis","html_url":"https://github.com/claudiu-coblis","followers_url":"https://api.github.com/users/claudiu-coblis/followers","following_url":"https://api.github.com/users/claudiu-coblis/following{/other_user}","gists_url":"https://api.github.com/users/claudiu-coblis/gists{/gist_id}","starred_url":"https://api.github.com/users/claudiu-coblis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/claudiu-coblis/subscriptions","organizations_url":"https://api.github.com/users/claudiu-coblis/orgs","repos_url":"https://api.github.com/users/claudiu-coblis/repos","events_url":"https://api.github.com/users/claudiu-coblis/events{/privacy}","received_events_url":"https://api.github.com/users/claudiu-coblis/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":7,"created_at":"2015-07-17T17:25:52Z","updated_at":"2015-08-13T16:41:38Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/masterzen/winrm/pulls/28","html_url":"https://github.com/masterzen/winrm/pull/28","diff_url":"https://github.com/masterzen/winrm/pull/28.diff","patch_url":"https://github.com/masterzen/winrm/pull/28.patch"},"body":"* Added CertAuth support \r\n* Added tests for CertAuth and some tests for BasicAuth \r\n* Modified README.md with an example using CertAuth and how to use it on the command-line\r\n\r\nNote: When the SSL certificate is generated for winRM the UPN extension must not be marked as critical because it can not be validated by GO."},"comment":{"url":"https://api.github.com/repos/masterzen/winrm/issues/comments/130753974","html_url":"https://github.com/masterzen/winrm/pull/28#issuecomment-130753974","issue_url":"https://api.github.com/repos/masterzen/winrm/issues/28","id":130753974,"user":{"login":"athornton","id":2453165,"avatar_url":"https://avatars.githubusercontent.com/u/2453165?v=3","gravatar_id":"","url":"https://api.github.com/users/athornton","html_url":"https://github.com/athornton","followers_url":"https://api.github.com/users/athornton/followers","following_url":"https://api.github.com/users/athornton/following{/other_user}","gists_url":"https://api.github.com/users/athornton/gists{/gist_id}","starred_url":"https://api.github.com/users/athornton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/athornton/subscriptions","organizations_url":"https://api.github.com/users/athornton/orgs","repos_url":"https://api.github.com/users/athornton/repos","events_url":"https://api.github.com/users/athornton/events{/privacy}","received_events_url":"https://api.github.com/users/athornton/received_events","type":"User","site_admin":false},"created_at":"2015-08-13T16:41:38Z","updated_at":"2015-08-13T16:41:38Z","body":"@masterzen Well, I'm not @claudiu-coblis , but I can address the \"why the fork\" problem.\r\n\r\nhttps://github.com/golang/go/issues/5742 basically has a pretty complete history; the short answer is, for Certificate Auth to work against WinRM, TLS needs to support renegotiation, and it does not.  Prior to @claudiu-coblis pointing to the issue page I didn't know the history, which is why I had the same question yesterday.  \r\n\r\nEssentially, the Golang maintainers hate supporting renegotiation because it's broken, weird, and basically only there to support Microsoft.  Which, well, all true, but talking to MS systems is something our customers are demanding, and I'm sure we're not alone here."}}