Description

I have to migrate to certificate based authentication against Entra ID. As it is not very well documented I created first the defaultPKCS#8 format withopenssl for the private key. I ran then into a failure as

could not parse the given key file. As we are using gitops and this was in my developing environment it was a chicken and egg problem as I develop Coder in Coder.

Solution

Improve documentation athttps://coder.com/docs/reference/cli/server#--oidc-client-key-file

describe:

• It must be a file (secret mounted into the POD)
• The private key must be inPKCS#1 format
• Howto determine PKCS#1 format. Give a hint to look at the header
• Double check the fingerprint in uploaded certificate file