Windows10， Windows PowerShell ISE
我正在尝试运行我在 https://damienbod.com/2019/06/27/using-chained-certificates-for-certificate-authentication-in-asp-net-core-3-0/中找到的示例
New-SelfSignedCertificate
-DnsName "root_ca_dev_test.com", "root_ca_dev_test.com"
-CertStoreLocation "cert:LocalMachineMy"
-NotAfter (Get-Date).AddYears(20)
-FriendlyName "root_ca_dev_test.com"
-KeyUsageProperty All
-KeyUsage CertSign, CRLSign, DigitalSignature
$mypwd = ConvertTo-SecureString -String "1234" -Force -AsPlainText
Get-ChildItem -Path cert:localMachinemy"The thumbprint..." | Export-PfxCertificate -FilePath C:gitroot_ca_dev_test.pfx -Password $mypwd
Export-Certificate -Cert cert:localMachinemy"The thumbprint..." -FilePath root_ca_dev_test.crt
我收到以下错误：
New-SelfSignedCertificate : Missing Subject information. The CloneCert parameter, DnsName parameter or Subject Alternative Name
extension must be specified
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:5 char:1
+ New-SelfSignedCertificate
+ ~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [New-SelfSignedCertificate], ParameterBindingException
+ FullyQualifiedErrorId : RuntimeException,Microsoft.CertificateServices.Commands.NewSelfSignedCertificateCommand
-DnsName : The term '-DnsName' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:6 char:4
+ -DnsName "root_ca_dev_test.com", "root_ca_dev_test.com"
+ ~~~~~~~~
+ CategoryInfo : ObjectNotFound: (-DnsName:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
-CertStoreLocation : The term '-CertStoreLocation' is not recognized as the name of a cmdlet, function, script file, or operable
program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:7 char:4
+ -CertStoreLocation "cert:LocalMachineMy"
+ ~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (-CertStoreLocation:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
-NotAfter : The term '-NotAfter' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:8 char:4
+ -NotAfter (Get-Date).AddYears(20)
+ ~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (-NotAfter:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
-FriendlyName : The term '-FriendlyName' is not recognized as the name of a cmdlet, function, script file, or operable program. Check
the spelling of the name, or if a path was included, verify that the path is correct and try again.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:9 char:4
+ -FriendlyName "root_ca_dev_test.com"
+ ~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (-FriendlyName:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
-KeyUsageProperty : The term '-KeyUsageProperty' is not recognized as the name of a cmdlet, function, script file, or operable
program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:10 char:4
+ -KeyUsageProperty All
+ ~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (-KeyUsageProperty:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
-KeyUsage : The term '-KeyUsage' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the
spelling of the name, or if a path was included, verify that the path is correct and try again.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:11 char:4
+ -KeyUsage CertSign, CRLSign, DigitalSignature
+ ~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (-KeyUsage:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException
Get-ChildItem : Cannot find path 'localMachinemyThe thumbprint...' because it does not exist.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:15 char:1
+ Get-ChildItem -Path cert:localMachinemy"The thumbprint..." | Expor ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : ObjectNotFound: (localMachinemyThe thumbprint...:String) [Get-ChildItem], ItemNotFoundException
+ FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.GetChildItemCommand
Export-PfxCertificate : Object reference not set to an instance of an object.
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:15 char:65
+ ... print..." | Export-PfxCertificate -FilePath C:gitroot_ca_dev_test.p ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Export-PfxCertificate], NullReferenceException
+ FullyQualifiedErrorId : System.NullReferenceException,Microsoft.CertificateServices.Commands.ExportPfxCertificate
Export-Certificate : Cannot bind parameter 'Cert' to the target. Exception setting "Cert": "Cannot find path
'Cert:localMachinemyThe thumbprint...' because it does not exist."
At U:DevelopmentServer-SideCertificatesGenerate Certificate - Example1.ps1:17 char:26
+ ... t-Certificate -Cert cert:localMachinemy"The thumbprint..." -FilePa ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : WriteError: (:) [Export-Certificate], ParameterBindingException
+ FullyQualifiedErrorId : ParameterBindingFailed,Microsoft.CertificateServices.Commands.ExportCertificateCommand
我安装了PKI模块，尽管我确实阅读了我需要PKIClient模块。 但是，我无法在网上任何地方找到它。 我需要这个模块还是PKI模块就足够了？
谢谢
你必须使用这个：
New-SelfSignedCertificate `
-DnsName "root_ca_dev_test.com", "root_ca_dev_test.com" `
-CertStoreLocation "cert:LocalMachineMy" `
-NotAfter (Get-Date).AddYears(20) `
-FriendlyName "root_ca_dev_test.com" `
-KeyUsageProperty All `
-KeyUsage CertSign, CRLSign, DigitalSignature
$mypwd = ConvertTo-SecureString -String "1234" -Force -AsPlainText
Get-ChildItem -Path "cert:localMachinemy'The thumbprint...'" | Export-PfxCertificate -FilePath "C:gitroot_ca_dev_test.pfx" -Password $mypwd
Export-Certificate -Cert "cert:localMachinemy'The thumbprint...'" -FilePath root_ca_dev_t
应使用反引号继续这些参数。否则Powershell将无法识别它。