Self Signed Certificates

readme.md

New-SelfSignedCert

Create a self signed cert and export to a file

./new-selfsignedcert.ps1 -cn localhost -ip "127.0.0.1"
    #$san,
    #$pfx = ".\cert.pfx"
    #$cer = ".\cert.cer"
    [securestring]$secret,
    [string]$friendlyname="SelfSigned Cert",
    [int]$years=1

New-SelfSignedCert.ps1

[CmdletBinding()]
param ( 
    [Parameter(mandatory=$true)]
    [string]$cn,
    [Parameter(mandatory=$false)]
    [string]$san,
    [Parameter(mandatory=$false)]
    [string]$ip,
    [Parameter(mandatory=$false)]
    [string]$pfx = ".\cert.pfx",
    [Parameter(mandatory=$false)]
    [string]$cer = ".\cert.cer",
    [Parameter(mandatory=$true)]
    [securestring]$secret,
    [Parameter(mandatory=$false)]
    [string]$friendlyname="SelfSigned Cert",
    [Parameter(mandatory=$false)]
    [int]$years=1
)
try {

#Todo:  make SAN AND IP an array

    $TextExtension = '2.5.29.17={text}dns=' + $($cn) + $(if($san){"&dns=$($san)" }) + $(if($ip){"&IPAddress=$($ip)"})
    $cert = New-selfsignedCertificate -FriendlyName "$($friendlyname)" -Subject "cn=$($cn)" -KeyExportPolicy "Exportable" -NotAfter (get-date).AddYears($years) -TextExtension @($TextExtension) -CertStoreLocation "cert:\LocalMachine\My"
    $pfxcert = Export-PFXCertificate -Cert $cert -FilePath $pfx -Password $secret
    $rootcert = Export-Certificate -Cert $cert -FilePath $cer -Type CER
    import-PFXcertificate -FilePath $cer `
            -CertStoreLocation Cert:\LocalMachine\Root `
            -Password $secret
} catch {
    Write-error $_.Exception.Message
}