Project Roadmap

This page contains a roadmap for the PowerShell PKI module project. Roadmap items are placed in a no paticular order.

PowerShell

• Provide "New-CertificateSigningRequest" command;
• Provide CA server backup/restore functions;
• Provide Windows OCSP Server management functions;
• Redesign and rewrite Test-WebServerSSL command (ref: https://pspki.codeplex.com/workitem/73)
• [Feature request] "signtool timestamp" support (ref: https://pspki.codeplex.com/workitem/66)
• [Feature request] Get/Set-CAAuditFilter (ref: https://pspki.codeplex.com/workitem/65)
• [Feature request] Test-Certificate (ref: https://pspki.codeplex.com/workitem/63)
• [Feature request] Certificate managers/enrollment agents restrictions (ref: https://pspki.codeplex.com/workitem/61)
• [Feature request] Get/Set-CAConfigurationProperty (ref: https://pspki.codeplex.com/workitem/60)

Underlying C# library (PKI.Core.dll)

ASN.1 type system

• Move ASN.1 to a separate assembly. It shall be a standalone assembly to work with primitive ASN.1 types;
• Create a separate class for each ASN.1 primitive type;
• Possibly deprecate a bunch of static methods in favor of new classes. Or move them to a separate class;
• Remove all unmanaged code from ASN.1 assembly;
• Create ASN.1 tree generator;

Cryptography class extensions:

• Replace unmanaged decoders for CRL, CTL with managed implementations;
• Provide certificate request generation functions;
• Provide Certificate Trust List generation functions;
• Provide Certificate Revocation List generation functions;
• Add certificate store-attached property support;

OCSP

• Implement OCSPv2 (as per RFC6960) client support;