From: Edward Delaporte <delaport@illinois.edu>
Date: Mon, 8 Feb 2021 23:25:46 +0000 (-0600)
Subject: Local user code singing utils.
X-Git-Url: https://apps.delaporte.us/gitweb/dotfiles.git/commitdiff_plain/7e0e193ba73dafeb8437720b779f5c9ed86223f2?ds=sidebyside

Local user code singing utils.
---

diff --git a/psmodules/sign.psm1 b/psmodules/sign.psm1
new file mode 100644
index 0000000..a5667de
--- /dev/null
+++ b/psmodules/sign.psm1
@@ -0,0 +1,43 @@
+<#
+.SYNPOSIS
+
+Commands to maintain a local code singing cert.
+
+#>
+$certName = "Local Code Sign Cert"
+$codeSigning = ""
+
+function New-CodeSignCert {
+	$cert = New-SelfSignedCertificate -CertStoreLocation Cert:\CurrentUser\My -Type CodeSigningCert -Subject $certName -KeyAlgorithm RSA -KeyLength 2048 -Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -KeyUsage "DigitalSignature"
+
+}
+
+function Get-CodeSignCert {
+	$certName = "Local Code Sign Cert"
+	return Get-ChildItem -Path Cert:\CurrentUser\My | Select-Object -First 1
+# 	| ? Subject -EQ "CN=$certName"
+}
+
+function Install-CodeSignCert {
+
+	$cert = Get-CodeSignCert
+	Move-Item -Path $cert.PSPath -Destination "Cert:\CurrentUser\Root"
+}
+
+function Invoke-CodeSign {
+	param(
+		[string]$Path
+	)
+	$cert = Get-CodeSignCert
+	Set-AuthenticodeSignature -FilePath $Path -Certificate $cert
+}
+
+Invoke-CodeSignProfile {
+	Invoke-CodeSign -Path $profile
+}
+
+Export-ModuleMember -Function New-CodeSignCert
+Export-ModuleMember -Function Get-CodeSignCert
+Export-ModuleMember -Function Install-CodeSignCert
+Export-ModuleMember -Function Invoke-CodeSign
+Export-ModuleMember -Function Invoke-CodeSignProfile
diff --git a/setup/codesign.ps1 b/setup/codesign.ps1
new file mode 100644
index 0000000..7f44f10
--- /dev/null
+++ b/setup/codesign.ps1
@@ -0,0 +1,35 @@
+<#
+.SYNPOSIS
+
+Commands to maintain a local code singing cert.
+
+#>
+$certName = "Local Code Sign Cert"
+
+function New-CodeSignCert {
+
+$cert = New-SelfSignedCertificate -CertStoreLocation Cert:\CurrentUser\My -Type CodeSigningCert -Subject "$certName"
+
+}
+
+function Get-CodeSignCert {
+	return Get-ChildItem -Path Cert:\CurrentUser\My | ? Subject -EQ "CN=$certName"
+}
+
+function Set-CodeSignCert {
+
+	$cert = Get-CodeSignCert
+	Move-Item -Path $cert.PSPath -Destination "Cert:\CurrentUser\Root"
+}
+
+function Invoke-SignScript {
+	param(
+		[string]$Path
+	)
+	$cert = Get-CodeSignCert
+	Set-AuthenticodeSignature -FilePath $Path -Certificate $cert
+}
+
+
+New-CodeSignCert
+Set-CodeSignCert