Skip to content

Conversation

@secdev02
Copy link

Create and Sign an exe or create certificates using PowerShell only that update the AIA CDP to inject a Canarytoken Added Cleanup

Proposed changes

Added CertificateGenerator.ps1

Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request.

This allows folks to create certificates with AIA and CDP using only PowerShell, no dependency on Python

Types of changes

What types of changes does your code introduce to this repository?
Put an x in the boxes that apply

  • Bugfix (non-breaking change which fixes an issue)
  • [ X ] New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation Update

Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your code.

  • [ X] Lint and unit tests pass locally with my changes (if applicable)
  • [ X] I have run pre-commit (pre-commit in the repo)
  • [ X] I have added tests that prove my fix is effective or that my feature works
  • [ X] I have added necessary documentation (if appropriate)
  • [X ] Linked to the relevant github issue or github discussion

Further comments

PowerShell native tooling does not allow us to set AIA / CDP therefore we rely on installing OpenSSL or Signtools or Python.
This is unnecessary, in order to facilitate local PowerShell only certificate generation and AIA / CDP properties.
I have created this as an example.

KInd Regards,

Casey

Create and Sign an exe or create certificates using PowerShell only that update the AIA CDP to inject a Canarytoken
Added Cleanup
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant