Quantcast
Channel: Public Key Infrastructure PowerShell module
Viewing all 729 articles
Browse latest View live
↧

Created Unassigned: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority" [93]

April 4, 2016, 9:04 am
$
0
0
PS PKI 3.1.0

I managed to get some code working beautifully on my Windows 7 SP1 workstation, but it throws an error when I try to run it locally on my Windows Server 2012 R2 standalone root certificate authority. I think I've narrowed it down to the one line below. I'm so close...so close!

It throws an error on server ca.example.com: Windows Server 2012 R2 (domain-joined standalone root CA)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
Submit-CertificateRequest : Cannot process argument transformation on parameter 'CertificationAuthority'. Cannot convert value "ca.example.com" to type
"PKI.CertificateServices.CertificateAuthority". Error: "There is no such object on the server.
"
At line:2 char:81
+ ... ationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

$CertificateRequestResponse
```

It works fine on workstation wx.example.com: Windows 7 SP1 (domain-joined workstation with RSAT)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
$CertificateRequestResponse


CertificationAuthority : PKI.CertificateServices.CertificateAuthority
RequestID : 22
Status : UnderSubmission
Certificate :
ErrorInformation : Taken Under Submission
```
↧
Search

New Post: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority"

April 4, 2016, 9:04 am
$
0
0
This discussion has been copied to a work item. Click here to go to the work item and continue the discussion.
↧
↧

Commented Unassigned: Running convert-pfxtopem command identical to get-help -examples and failing to work [91]

April 4, 2016, 9:09 am
$
0
0
Hello,

I downloaded then installed pspki module on my Powershell 4.0 then attempted to complete this command and got this result:

PS C:\> $pass = read-host "enter password for pfx file:" -assecurestring
enter password for pfx file:: ***********
PS C:\> convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outputpath c:\pki-certs\new\J140515A4
081.pem
Convert-PfxToPem : A parameter cannot be found that matches parameter name 'inputpath'.
At line:1 char:18
+ convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outpu ...
+ ~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Convert-PfxToPem], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Convert-PfxToPem


Please advise what commands I should use to convert a .pfx to a .pem.

Thanks!

Comments: Please, go to `Issues` tab and press `New Issue` button to create feature request.
↧

New Post: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority"

April 4, 2016, 12:52 pm
$
0
0
I just tried to repro the issue and was unsuccessful. I joined to domain Windows Server 2012 R2 machine and installed Standalone Root CA role. Connect-CA command works as expected.

Can you, please, provide a stacktrace on the error? Run the Connect-CA command and immediately call: $error[0].Exception.InnerException.StackTrace. Post here trace information.
↧

New Post: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority"

April 4, 2016, 1:03 pm
$
0
0 
Connect-CA
$error[0].Exception.InnerException.StackTrace

New-Object : Exception calling ".ctor" with "1" argument(s): "There is no such object on the server.
"
At C:\windows\system32\windowspowershell\v1.0\Modules\PSPKI\Server\Connect-CertificationAuthority.ps1:13 char:4
+             New-Object PKI.CertificateServices.CertificateAuthority $CName
+             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidOperation: (:) [New-Object], MethodInvocationException
    + FullyQualifiedErrorId : ConstructorInvokedThrowException,Microsoft.PowerShell.Commands.NewObjectCommand
 
   at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.PropertyValueCollection.PopulateList()
   at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
   at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
   at PKI.CertificateServices.CertificateAuthority.get_ds()
   at PKI.CertificateServices.CertificateAuthority..ctor(String computerName)
↧
↧

New Post: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority"

April 4, 2016, 1:18 pm
$
0
0
I got it and found what is wrong here. It is the problem with ICertConfig interface. I will look what I can do with this.
↧

Commented Unassigned: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority" [93]

April 4, 2016, 1:41 pm
$
0
0
PS PKI 3.1.0

I managed to get some code working beautifully on my Windows 7 SP1 workstation, but it throws an error when I try to run it locally on my Windows Server 2012 R2 standalone root certificate authority. I think I've narrowed it down to the one line below. I'm so close...so close!

It throws an error on server ca.example.com: Windows Server 2012 R2 (domain-joined standalone root CA)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
Submit-CertificateRequest : Cannot process argument transformation on parameter 'CertificationAuthority'. Cannot convert value "ca.example.com" to type
"PKI.CertificateServices.CertificateAuthority". Error: "There is no such object on the server.
"
At line:2 char:81
+ ... ationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

$CertificateRequestResponse
```

It works fine on workstation wx.example.com: Windows 7 SP1 (domain-joined workstation with RSAT)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
$CertificateRequestResponse


CertificationAuthority : PKI.CertificateServices.CertificateAuthority
RequestID : 22
Status : UnderSubmission
Certificate :
ErrorInformation : Taken Under Submission
```
Comments: The problem is that ICertConfig::Next() reads CAs from various sources which is not necessary an Active Directory configuration naming context. Attaching an update PKI.Core.dll for testing purposes. Please, replace this DLL in the `Library` folder. Now the error should go away. Please, confirm this.
↧

New Post: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority"

April 4, 2016, 1:42 pm
↧
Search

Commented Unassigned: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority" [93]

April 4, 2016, 3:51 pm
$
0
0
PS PKI 3.1.0

I managed to get some code working beautifully on my Windows 7 SP1 workstation, but it throws an error when I try to run it locally on my Windows Server 2012 R2 standalone root certificate authority. I think I've narrowed it down to the one line below. I'm so close...so close!

It throws an error on server ca.example.com: Windows Server 2012 R2 (domain-joined standalone root CA)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
Submit-CertificateRequest : Cannot process argument transformation on parameter 'CertificationAuthority'. Cannot convert value "ca.example.com" to type
"PKI.CertificateServices.CertificateAuthority". Error: "There is no such object on the server.
"
At line:2 char:81
+ ... ationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

$CertificateRequestResponse
```

It works fine on workstation wx.example.com: Windows 7 SP1 (domain-joined workstation with RSAT)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
$CertificateRequestResponse


CertificationAuthority : PKI.CertificateServices.CertificateAuthority
RequestID : 22
Status : UnderSubmission
Certificate :
ErrorInformation : Taken Under Submission
```
Comments: You're definitely onto something! ```Connect-CA``` is now working, but naturally, something else broke. :) Code ``` Function Handle-Error { Param ( [PSObject]$Error ) Process { $Error[0].Exception.InnerException.Message $Error[0].Exception.InnerException.StackTrace } } Write-Host "# Import-Module PsPKI" Try { Import-Module PsPKI } Catch { Handle-Error -Error $Error[0] } Write-Host "# Connect-CA" Try { Connect-CA } Catch { Handle-Error -Error $Error[0] } ``` Output ``` # Import-Module PsPKI Add-Type : Unable to load one or more of the requested types. Retrieve the LoaderExceptions property for more information. At C:\Windows\system32\WindowsPowerShell\v1.0\Modules\PsPKI\PSPKI.psm1:2 char:1 + Add-Type -Path $PSScriptRoot\Library\PKI.Core.dll -ErrorAction Stop + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : NotSpecified: (:) [Add-Type], ReflectionTypeLoadException + FullyQualifiedErrorId : System.Reflection.ReflectionTypeLoadException,Microsoft.PowerShell.Commands.AddTypeCommand Import-Module : The module to process 'PSPKI.psm1', listed in field 'ModuleToProcess/RootModule' of module manifest 'C:\Windows\system32\WindowsPowerShell\v1.0\Modules\PsPKI\PsPKI.psd1' was not processed because no valid module was found in any module directory. At C:\Users\ag-admin\Desktop\Test1.ps1:14 char:5 + Import-Module PsPKI + ~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ResourceUnavailable: (PsPKI:String) [Import-Module], PSInvalidOperationException + FullyQualifiedErrorId : Modules_ModuleFileNotFound,Microsoft.PowerShell.Commands.ImportModuleCommand # Connect-CA DisplayName ComputerName IsAccessible ServiceStatus Type ----------- ------------ ------------ ------------- ---- CTAG AG-CA.exec.ds.state.ct.us True Running Standalone Root CA ```
↧
↧

Commented Unassigned: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority" [93]

April 4, 2016, 10:19 pm
$
0
0
PS PKI 3.1.0

I managed to get some code working beautifully on my Windows 7 SP1 workstation, but it throws an error when I try to run it locally on my Windows Server 2012 R2 standalone root certificate authority. I think I've narrowed it down to the one line below. I'm so close...so close!

It throws an error on server ca.example.com: Windows Server 2012 R2 (domain-joined standalone root CA)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
Submit-CertificateRequest : Cannot process argument transformation on parameter 'CertificationAuthority'. Cannot convert value "ca.example.com" to type
"PKI.CertificateServices.CertificateAuthority". Error: "There is no such object on the server.
"
At line:2 char:81
+ ... ationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

$CertificateRequestResponse
```

It works fine on workstation wx.example.com: Windows 7 SP1 (domain-joined workstation with RSAT)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
$CertificateRequestResponse


CertificationAuthority : PKI.CertificateServices.CertificateAuthority
RequestID : 22
Status : UnderSubmission
Certificate :
ErrorInformation : Taken Under Submission
```
Comments: Revert the old PKI.Core.dll file and wait until new official release (expected in next few days).
↧

Commented Unassigned: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority" [93]

April 5, 2016, 10:45 am
$
0
0
PS PKI 3.1.0

I managed to get some code working beautifully on my Windows 7 SP1 workstation, but it throws an error when I try to run it locally on my Windows Server 2012 R2 standalone root certificate authority. I think I've narrowed it down to the one line below. I'm so close...so close!

It throws an error on server ca.example.com: Windows Server 2012 R2 (domain-joined standalone root CA)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
Submit-CertificateRequest : Cannot process argument transformation on parameter 'CertificationAuthority'. Cannot convert value "ca.example.com" to type
"PKI.CertificateServices.CertificateAuthority". Error: "There is no such object on the server.
"
At line:2 char:81
+ ... ationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

$CertificateRequestResponse
```

It works fine on workstation wx.example.com: Windows 7 SP1 (domain-joined workstation with RSAT)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
$CertificateRequestResponse


CertificationAuthority : PKI.CertificateServices.CertificateAuthority
RequestID : 22
Status : UnderSubmission
Certificate :
ErrorInformation : Taken Under Submission
```
Comments: Amazing, thanks!
↧

Commented Unassigned: Unable to convert pfx to pem [92]

April 11, 2016, 3:22 am
$
0
0
Hi,

I am trying to convert pfx to pem by using Convert-PfxToPem but I get the error below:

```
PS C:\Users\user\Desktop\CA> Convert-PfxToPem -InputFile C:\Users\user\Desktop\CA\test.pfx -Password (ConvertTo-SecureString 'test' -AsPlainText -Force) -OutputFile C:\Users\user\Desktop\CA\test.pem
Key not valid for use in specified state
At C:\Users\user\Documents\WindowsPowerShell\Modules\pspki\Client\Convert-PfxToPem.ps1:137 char:21
+ } else {throw New-Object ComponentModel.Win32Exception ([Runtime.Int ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OperationStopped: (:) [], Win32Exception
+ FullyQualifiedErrorId : Key not valid for use in specified state
```
The private key is marked as exportable.

Thanks
Comments: Thanks, it works now.
↧

Closed Unassigned: Cannot convert value "ca.example.com" to type "PKI.CertificateServices.CertificateAuthority" [93]

April 17, 2016, 6:55 am
$
0
0
PS PKI 3.1.0

I managed to get some code working beautifully on my Windows 7 SP1 workstation, but it throws an error when I try to run it locally on my Windows Server 2012 R2 standalone root certificate authority. I think I've narrowed it down to the one line below. I'm so close...so close!

It throws an error on server ca.example.com: Windows Server 2012 R2 (domain-joined standalone root CA)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
Submit-CertificateRequest : Cannot process argument transformation on parameter 'CertificationAuthority'. Cannot convert value "ca.example.com" to type
"PKI.CertificateServices.CertificateAuthority". Error: "There is no such object on the server.
"
At line:2 char:81
+ ... ationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certi ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:) [Submit-CertificateRequest], ParameterBindingArgumentTransformationException
+ FullyQualifiedErrorId : ParameterArgumentTransformationError,Submit-CertificateRequest

$CertificateRequestResponse
```

It works fine on workstation wx.example.com: Windows 7 SP1 (domain-joined workstation with RSAT)

```
Import-Module PsPKI
$CertificateRequestResponse = Submit-CertificateRequest -CertificationAuthority "ca.example.com" -Path "\\fs.example.com\path\to\certificates\CertReq.csr"
$CertificateRequestResponse


CertificationAuthority : PKI.CertificateServices.CertificateAuthority
RequestID : 22
Status : UnderSubmission
Certificate :
ErrorInformation : Taken Under Submission
```
Comments: Fixed in v3.2.5
↧
↧

Closed Unassigned: Unable to convert pfx to pem [92]

April 17, 2016, 6:56 am
$
0
0
Hi,

I am trying to convert pfx to pem by using Convert-PfxToPem but I get the error below:

```
PS C:\Users\user\Desktop\CA> Convert-PfxToPem -InputFile C:\Users\user\Desktop\CA\test.pfx -Password (ConvertTo-SecureString 'test' -AsPlainText -Force) -OutputFile C:\Users\user\Desktop\CA\test.pem
Key not valid for use in specified state
At C:\Users\user\Documents\WindowsPowerShell\Modules\pspki\Client\Convert-PfxToPem.ps1:137 char:21
+ } else {throw New-Object ComponentModel.Win32Exception ([Runtime.Int ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OperationStopped: (:) [], Win32Exception
+ FullyQualifiedErrorId : Key not valid for use in specified state
```
The private key is marked as exportable.

Thanks
Comments: Fixed in v3.2.5
↧

Closed Unassigned: Running convert-pfxtopem command identical to get-help -examples and failing to work [91]

April 17, 2016, 6:56 am
$
0
0
Hello,

I downloaded then installed pspki module on my Powershell 4.0 then attempted to complete this command and got this result:

PS C:\> $pass = read-host "enter password for pfx file:" -assecurestring
enter password for pfx file:: ***********
PS C:\> convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outputpath c:\pki-certs\new\J140515A4
081.pem
Convert-PfxToPem : A parameter cannot be found that matches parameter name 'inputpath'.
At line:1 char:18
+ convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outpu ...
+ ~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Convert-PfxToPem], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Convert-PfxToPem


Please advise what commands I should use to convert a .pfx to a .pem.

Thanks!

Comments: Fixed in v3.2.5
↧
Search

Reopened Unassigned: Running convert-pfxtopem command identical to get-help -examples and failing to work [91]

April 17, 2016, 6:58 am
$
0
0
Hello,

I downloaded then installed pspki module on my Powershell 4.0 then attempted to complete this command and got this result:

PS C:\> $pass = read-host "enter password for pfx file:" -assecurestring
enter password for pfx file:: ***********
PS C:\> convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outputpath c:\pki-certs\new\J140515A4
081.pem
Convert-PfxToPem : A parameter cannot be found that matches parameter name 'inputpath'.
At line:1 char:18
+ convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outpu ...
+ ~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Convert-PfxToPem], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Convert-PfxToPem


Please advise what commands I should use to convert a .pfx to a .pem.

Thanks!

↧

Closed Unassigned: Running convert-pfxtopem command identical to get-help -examples and failing to work [91]

April 17, 2016, 6:58 am
$
0
0
Hello,

I downloaded then installed pspki module on my Powershell 4.0 then attempted to complete this command and got this result:

PS C:\> $pass = read-host "enter password for pfx file:" -assecurestring
enter password for pfx file:: ***********
PS C:\> convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outputpath c:\pki-certs\new\J140515A4
081.pem
Convert-PfxToPem : A parameter cannot be found that matches parameter name 'inputpath'.
At line:1 char:18
+ convert-pfxtopem -inputpath c:\pki-certs\J140515A4081.pfx -password $pass -outpu ...
+ ~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Convert-PfxToPem], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Convert-PfxToPem


Please advise what commands I should use to convert a .pfx to a .pem.

Thanks!

Comments: Fixed in v3.2.5
↧
↧

Edited Unassigned: Unable to convert pfx to pem [92]

April 17, 2016, 6:59 am
$
0
0
Hi,

I am trying to convert pfx to pem by using Convert-PfxToPem but I get the error below:

```
PS C:\Users\user\Desktop\CA> Convert-PfxToPem -InputFile C:\Users\user\Desktop\CA\test.pfx -Password (ConvertTo-SecureString 'test' -AsPlainText -Force) -OutputFile C:\Users\user\Desktop\CA\test.pem
Key not valid for use in specified state
At C:\Users\user\Documents\WindowsPowerShell\Modules\pspki\Client\Convert-PfxToPem.ps1:137 char:21
+ } else {throw New-Object ComponentModel.Win32Exception ([Runtime.Int ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : OperationStopped: (:) [], Win32Exception
+ FullyQualifiedErrorId : Key not valid for use in specified state
```
The private key is marked as exportable.

Thanks
↧

Closed Unassigned: Get-CertificateRevocationList fails when given a relative path to a CRL file [90]

April 17, 2016, 7:04 am
$
0
0
If I try and retrieve a CRL from a local file using a relative path, the Cmdlet throws an exception:
```
PS Scripts:\> Get-CRL .\Temp.crl
New-Object : Exception calling ".ctor" with "1" argument(s): "The system cannot find the file specified"
At Z:\Documents\WindowsPowerShell\Modules\PSPKI\Client\Get-CertificateRevocationList.ps1:23 char:4
+ New-Object Security.Cryptography.X509Certificates.X509CRL2 -ArgumentList $Pat ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [New-Object], MethodInvocationException
+ FullyQualifiedErrorId : ConstructorInvokedThrowException,Microsoft.PowerShell.Commands.NewObjectCommand
```

The full path to the same file works fine:
```
PS Scripts:\> Get-CRL Z:\Documents\Scripts\Temp.crl


Version : 2
Type : Base CRL
IssuerDN : System.Security.Cryptography.X509Certificates.X500DistinguishedName
Issuer : CN=...
ThisUpdate : 20/11/2015 14:42:02
NextUpdate : 21/01/2016 03:02:02
SignatureAlgorithm : System.Security.Cryptography.Oid
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid...}
RevokedCertificates :
RawData : {48, 130, 2, 137...}
Handle : 483681408
```

UPDATE:
A relative path from the root of the local drive works:
```
PS Z:\> Get-CRL .\Documents\Scripts\Temp.crl


Version : 2
Type : Base CRL
IssuerDN : System.Security.Cryptography.X509Certificates.X500DistinguishedName
Issuer : CN=...
ThisUpdate : 20/11/2015 14:42:02
NextUpdate : 21/01/2016 03:02:02
SignatureAlgorithm : System.Security.Cryptography.Oid
Extensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid,
System.Security.Cryptography.Oid, System.Security.Cryptography.Oid...}
RevokedCertificates :
RawData : {48, 130, 2, 137...}
Handle : 483680112
```

But not from a sub-folder:
```
PS Z:\Documents> Get-CRL .\Scripts\Temp.crl
New-Object : Exception calling ".ctor" with "1" argument(s): "The system cannot find the file specified"
At Z:\Documents\WindowsPowerShell\Modules\PSPKI\Client\Get-CertificateRevocationList.ps1:23 char:4
+ New-Object Security.Cryptography.X509Certificates.X509CRL2 -ArgumentList $Pat ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [New-Object], MethodInvocationException
+ FullyQualifiedErrorId : ConstructorInvokedThrowException,Microsoft.PowerShell.Commands.NewObjectCommand
```
Comments: Fixed in v3.2.5
↧

Closed Unassigned: Register-ObjectIdentifier FIPS error [87]

April 17, 2016, 7:04 am
$
0
0
Using the -UseActiveDirectory option, the following error is thrown:

Exception calling "Register" with "6" argument(s): "This implementation is not part of the Windows Platform FIPS validated cryptographic algorithms."
At C:\Windows\system32\WindowsPowerShell\v1.0\Modules\PSPKI\Client\Register-ObjectIdentifier.ps1:32 char:3
+ [Security.Cryptography.Oid2]::Register($Value,$FriendlyName,$Group,$UseActiveD ...
+ CategoryInfo : NotSpecified: (:) [], MethodInvocationException
+ FullyQualifiedErrorId : InvalidOperationException

-Tim
Comments: Fixed in v3.2.5
↧
Viewing all 729 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>