diff --git a/Invoke-OpenSSHConfiguration.ps1 b/Invoke-OpenSSHConfiguration.ps1 index 91e8294..8b2ccb4 100644 --- a/Invoke-OpenSSHConfiguration.ps1 +++ b/Invoke-OpenSSHConfiguration.ps1 @@ -515,7 +515,6 @@ Switch (Test-ProcessElevationStatus) { $ConvertFromCertificateToPEMParameters = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary' $ConvertFromCertificateToPEMParameters.CertificateList = $CACertificates - $ConvertFromCertificateToPEMParameters.Export = $True $ConvertFromCertificateToPEMParameters.ExportRootDirectory = $OpenSSHProgramDataDirectory.FullName $ConvertFromCertificateToPEMParameters.CreateCABundle = $True $ConvertFromCertificateToPEMParameters.CABundleFileName = 'OpenSSH-TrustedCertificateAuthorities-LocalMachine.pem' diff --git a/Toolkit/Functions/ConvertFrom-CertificateToPEM.ps1 b/Toolkit/Functions/ConvertFrom-CertificateToPEM.ps1 index cbb493c..3f449a3 100644 --- a/Toolkit/Functions/ConvertFrom-CertificateToPEM.ps1 +++ b/Toolkit/Functions/ConvertFrom-CertificateToPEM.ps1 @@ -168,11 +168,11 @@ Function ConvertFrom-CertificateToPEM $IntermediateCAs = Get-ChildItem -Path 'Cert:\LocalMachine\CA' | Where-Object { ($_.NotAfter -gt (Get-Date)) -and ($_.Extensions | Where-Object { $_.Oid.FriendlyName -eq 'Basic Constraints' -and $_.CertificateAuthority }) } $CACertificateList.AddRange([System.Security.Cryptography.X509Certificates.X509Certificate2[]]$IntermediateCAs) - # Export to the standard OpenSSH machine configuration directory + # Create CA bundle in the standard OpenSSH machine configuration directory + # Note: -Export is NOT specified, so individual certificate files are NOT created (only the bundle) # Note: -IncludePrivateKey is NOT specified, so only public certificates are exported (secure default) $ConvertFromCertificateToPEMParameters = New-Object -TypeName 'System.Collections.Specialized.OrderedDictionary' $ConvertFromCertificateToPEMParameters.CertificateList = $CACertificateList - $ConvertFromCertificateToPEMParameters.Export = $True $ConvertFromCertificateToPEMParameters.ExportRootDirectory = "$($Env:ProgramData)\ssh" $ConvertFromCertificateToPEMParameters.CreateCABundle = $True $ConvertFromCertificateToPEMParameters.CABundleFileName = 'OpenSSH-TrustedCertificateAuthorities-LocalMachine.pem'