jborean93 / omi

Open Management Infrastructure
Other
111 stars 13 forks source link

Support getting cert check options from PowerShell SessionOption #15

Closed jborean93 closed 4 years ago

jborean93 commented 4 years ago

https://github.com/PowerShell/PowerShell/issues/13577 has more details on the background of this issue but there are 2 issues with cert verification with WSMan endpoints

What this PR does is

The first two will allow the -SkipC*Check options to pass down and actually work once PowerShell removes the hardcoded check. The last fix gives PowerShell a way to remove that hardcoded check when it knows the client supports certificate verification.

Ultimately this will allow an end user of this fork the ability to connect to a WSMan listener and feel secure that the proper verification work is in place but also allow them to disable those checks using the proper PowerShell way like they can do on Windows.

jborean93 commented 4 years ago

https://github.com/PowerShell/PowerShell/pull/13786 contains the proposed PowerShell changes that will drop the hardcoded skip checks if possible.