dsccommunity / CertificateDsc

DSC resources to simplify administration of certificates on a Windows Server.
https://dsccommunity.org
MIT License
122 stars 69 forks source link

CertReq: Expired Certificate Validation #268

Open thesmall opened 2 years ago

thesmall commented 2 years ago

Pull Request (PR) description

Adds logic to exclude certificates which have already expired from being included in the array of certificates returned from the certificate store, when building a certificate request to be submitted to the PKI.

If the certificate request attempts to perform renewal on a certificate that has already expired, the certificate request will be denied by the Certification Authority with an error: Certificate not issued (Denied) Error Verifying Request Signature or Signing Certificate A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file..

This Pull Request (PR) fixes the following issues

None

Task list


This change is Reviewable

PlagueHO commented 3 weeks ago

Hi @thesmall - are you still working on this one?