Bug Report

Describe the bug
This issue is related with new feature in v4.2.0 of #11009.

After testing, the function works but with limitations.
It only could load TLS cert within Windows certstore of Root and does not support for other valid certstores.

tls.windows.certstore_name: Root

Not sure if it is related with default values of

To Reproduce

• Steps to reproduce the problem with similar config:

service:
  flush_interval: 2
  log_level: debug

pipeline:
  inputs:
    - name: dummy
      tag: test

  outputs:
    - name: forward
      match: "test"
      host: 127.0.0.1
      port: 24284
      tls:  on
      tls.verify: on
      tls.vhost: localhost

      tls.windows.certstore_name:         Root/My
      tls.windows.use_enterprise_store:   false
      tls.windows.client_thumbprints:     <specific thumbprint>

./fluent-bit-4.2.0.exe -c test-of-above.yaml

Expected behavior

It is expected to load the TLS cert in certstore of My with specific thumbprint, but it failed as below snapshoot shows.

Screenshots

Your Environment
Windows Server 2019 Standand

Additional context

As screenshots shows, the thumbprint xxx17412b5b in certstore My could not be loaded.
However, after I import it to Root, it could be loaded as expected.

Other Request
Indeed, our user case is using output plugin of Loki.
The config yaml looks like:

outputs:
  - name: loki
    xxxx: xxxx
    tls.ca_file:  <path for local CA file>
    tls.windows.certstore_name:         Root
    tls.windows.client_thumbprints:     <specific thumbprint>
    xxxx: xxx

With above WA that imported client cert to Root and I want to combine of using local file and certstore, but it failed：

So, I just wonder that reading from file and from certstore could not be used at same time, right ?
It is as expected per design or it could be enhanced to support this compatibility.

2> Regarding Loki, it needs another CA cert, could we add another filed such as

   tls.windows.ca_thumbprints:     <specific ca cert thumbprint>

to support reading another cert from Windows certstore ?

Appreciate for any discussion or comments.