You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

David Norman 7963279fc2 Generate SHA256 signed certificates for WinRM (#36668) ... * Generate SHA256 signed certificates Vulnerability scanners are increasingly reporting SHA-1 signed certificates as a vulnerability on servers. Before this change, -ForceNewSSLCert generates a signature algorithm that openssl shows as sha1WthRSAEncryption for WinRM port 5986. After, this forces certificates to be signed with SHA256, which openssl shows sha256WithRSAEncryption. Some example SHA-1 deprecations include: - https://docs.microsoft.com/en-us/security-updates/SecurityAdvisories/2017/4010323 - https://blog.mozilla.org/security/2014/09/23/phasing-out-certificates-with-sha-1-based-signature-algorithms/ Also note that RDP 3389 on Windows 2016 also defaults to a SHA256 certificate. The specifics were merged from a script mod I found at https://gallery.technet.microsoft.com/scriptcenter/PowerShell-script-to-7a0321b7 intended for Exchange. It also includes a mod to add an alternate DNS listing so the cert contains CN=HOSTNAME plus now also an alternative of the FQDN. I tested this change on Windows 2008R2, 2012R2, and 2016 Datacenter. * Keep WinRM cert key length at 4096. * Remove WinRM cert exportpolicy setting.		8 years ago
..
playbooks	…
scripts	Generate SHA256 signed certificates for WinRM (#36668)	8 years ago
DOCUMENTATION.yml	Link to module developing_modules_documenting.html	9 years ago
ansible.cfg	Implement plugin filtering	8 years ago
hosts	…
hosts.yaml	minor text fixes	9 years ago
hosts.yml	linked cause people forget yaml and yml exist	10 years ago
plugin_filters.yml	Implement plugin filtering	8 years ago