Can't use password including double quote with service_certmapping resource

[Annih]

The current implementation of the service_certmapping provider is using the winrm.cmd witch calls the winrm.vbs. This script uses a regular expression that forbids usage of double quote in inputs provided as "hash":

private const PTRN_HASH_TOK = "\s*([\w:]+)\s*=\s*(\$null|""([^""]*)"")\s*"

• A simple but "dirty" solution is to use an XML file as winrm.cmd input.
  • PRO: It should work perfectly in all condition
  • CON: We have to "temporarily" generate an xml file on disk with plaintext password
• A workaround is to use the former implementation when there is a double quote in the password.
  • PRO: No xml file with plaintext password
  • CON: More code; will not work when running as SYSTEM in Workgroup (#3)
• A more complexe but "clean" solution is to manage the certmapping registry key, and manuall save the Network Service credentials.
  • PRO: do not rely on wsman; similar to listener; require only administrative access; work for all password and systems
  • CON: complexe, need to impersonate NT Authority\Network Service in another service/task

A simple workaround is to not use password with double quote :)