Update netsh-cert-update.ps1

This commit is contained in:
2026-01-13 16:49:42 +00:00
parent 7f3ac24ae0
commit eb925e705b

View File

@@ -1,13 +1,13 @@
$old="{OLD_THUMBPRINT}"
$new="{NEW_THUMBPRINT}"
$old="5df978393c6d7a5cd826a911d824322d4e7f6898"
$new="391f6011610d4f3dfb8366455acb9ece00460846"
$oldN=($old -replace '\s','').ToLower()
$newN=($new -replace '\s','').ToLower()
$raw = netsh http show sslcert
$bindings = @()
$cur = $null
foreach ($line in $raw) {
if ($line -match '^\s*(IP:port|Hostname:port)\s*:\s*(.+)\s*$') {
if ($cur) { $bindings += [pscustomobject]$cur }
@@ -21,7 +21,7 @@ foreach ($line in $raw) {
continue
}
if (-not $cur) { continue }
if ($line -match '^\s*Certificate Hash\s*:\s*(.+)\s*$') {
$cur.Hash = (($matches[1] -replace '\s','').ToLower())
continue
@@ -36,14 +36,14 @@ foreach ($line in $raw) {
}
}
if ($cur) { $bindings += [pscustomobject]$cur }
$targets = $bindings | Where-Object { $_.Hash -eq $oldN }
if (-not $targets) {
Write-Host "No bindings found with thumbprint $oldN"
return
}
foreach ($b in $targets) {
Write-Host ""
Write-Host "Binding: $($b.Type) $($b.Binding)"
@@ -52,7 +52,7 @@ foreach ($b in $targets) {
Write-Host "Cert : $oldN -> $newN"
Write-Host ""
$choice = Read-Host "Update this binding? [Y]es / [N]o / [S]top"
switch ($choice.ToUpper()) {
"Y" {
$key = if ($b.Type -eq "IP:port") {
@@ -60,32 +60,32 @@ foreach ($b in $targets) {
} else {
"hostnameport=$($b.Binding)"
}
Write-Host "Updating $($b.Binding)..."
& netsh http delete sslcert $key | Out-Null
& netsh http add sslcert $key `
& netsh http delete sslcert $key
& netsh http add sslcert $key `
"certhash=$newN" `
"appid=$($b.AppId)" `
"certstorename=$($b.Store)" | Out-Null
"certstorename=$($b.Store)"
Write-Host "Updated."
}
"N" {
Write-Host "Skipped."
continue
}
"S" {
Write-Host "Stopped by user."
break
}
default {
Write-Host "Invalid choice, skipping this binding."
continue
}
}
}
Write-Host "Processing complete."
Write-Host "Processing complete."