-
Notifications
You must be signed in to change notification settings - Fork 7.7k
Get-pfxCertificate cmdlet not working #473
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
This would not make sense, PFX certificates are only used on Windows. |
I am certainly not an expert on certificates, but just because it's a Windows thing, it doesn't mean it shouldn't be implemented on Linux. Certificates are basically wrappers for public keys, and are there 8000 alternate mechanisms for Linux? What happens if we need to inter-work between Linux and Windows? I hope whoever gets assigned to this can investigate this further. |
I do not think this should be implemented on Linux. The cmdlet is meant to return the PFX certificates stored on the system, of which there are and will not be any on Linux. |
PFX is a very common certificate encapsulation format, many online services support it to pass certificate structures around that are password protected. It's also the default way to support HTTPS with the Kestrel server in .NET Core 1.1. Therefore I think PFX support shouldn't be dismissed. I did see that with release v6.0.0-alpha.17 #3224 the Get-PfxCertificate is now supported. 👍 |
Just to add to this, there is also a -FIlePath to import from a file Which I am using to then check the thumbprint of that certificate without importing it into my windows store, this use case could be equally useful on Linuxes. |
@SteveL-MSFT Should we re-open this for Unix? |
We'll need to do more research on PowerShell cert management on Linux, but this currently is not a priority. |
I think OpenSSL utilities is good start point for the research. |
Get-PfxCertificate was added in #3224 for Windows and Unix. |
No description provided.
The text was updated successfully, but these errors were encountered: