Cannot use certificates from machine store.
In openconnect/openconnect#432 (closed) I have a Windows user (@juxeii) attempting to use system keys.
It seems that the GnuTLS 'systemkey' tool is not installed, so it isn't really available to users. I provided one of my own but it doesn't seem to print any meaningful label just opaque hex IDs:
Label: (null)
Cert: system:win:id=37835fdcdfe2817ee22d6b161e54812fe95867fe;type=cert
Key: system:win:id=37835fdcdfe2817ee22d6b161e54812fe95867fe;type=privkey
Label: (null)
Cert: system:win:id=cd8469175c3bed4e2a9bbe7471019f2e9327943d;type=cert
Key: system:win:id=cd8469175c3bed4e2a9bbe7471019f2e9327943d;type=privkey
Label: (null)
Cert: system:win:id=b2b139644c0a13aabc820969e2d97bb997596b66;type=cert
Key: system:win:id=b2b139644c0a13aabc820969e2d97bb997596b66;type=privkey
How does the user relate these to the keys they see in certlm? Why are there only three? What do I tell the user other than "There is some magic string starting with system:win:
which will make it use the key you want" ?
Edited by David Woodhouse