re: How to export issued certificates from a CA programatically (PowerShell)

Stefan Horz — Fri, 15 Jun 2012 14:15:14 GMT

Hello,

for me this is very interesting.

Is this possible to get with this code one certificate thats meet a criteria (e.g. Disply name = Firstname Lastname).

Regards,

Stefan Horz

re: How to export issued certificates from a CA programatically (PowerShell)

Vadims Podans — Sat, 14 Apr 2012 15:53:40 GMT

The code is not very efficient. At first, you don't need to add all columns to the view. For the current task it is enough to add RequestID and rawCertificate columns. The part:

# Place each column in the view

for ($x=0; $x -lt $iColumnCount; $x++) { $objCertView.SetResultColumn($x) }

should be replaced with:

$objCertView.SetResultColumnCount(2)

$Column = $objCertView.GetColumnIndex($false,"RequestID")

$objCertView.SetResultColumn($Column)

$Column = $objCertView.GetColumnIndex($false,"RawCertificate")

$objCertView.SetResultColumn($Column)

the next: the code dumps entire Request table (which includes issued, revoked, pending and denied requests). It is reasonable to limit DB search to required request state — Issued certificates. In that case you need to set restriction based on disposition ID (which is 20 for issued certificates). Add the code to previous modification:

$RColumn = $objCertView.GetColumnIndex($False, "Disposition")

$objCertView.SetRestriction($RColumn,1,0,20)

and then open view.

p.s. $objCertViewRow.Reset(); — for what reason you reset enumerator when it is already set to initial position?

p.p.s. Set-Content $strPath $objValue — by default Set-Content cmdlet saves the file by using Unicode encoding which may be not supported by 3rd party tools (hence, Windows Server 2008 R2 CA still do not support Unicode requests!) and waste disk space. You should use ASCII encoding for saved files:

Set-Content -Path $strPath -Value $objValue -Encoding ASCII

p.p.p.s in PowerShell it is not necessary to place BREAK statement after each case element. This is because PowerShell supports multiple case matching.