Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update cert-notice readme #2504

Merged
merged 3 commits into from
Jun 18, 2024
Merged

Update cert-notice readme #2504

Changes from 2 commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
965a06c
updated readme to include cert notice
WithHolm Jun 15, 2024
c85f0ba
fix formatting on table
WithHolm Jun 15, 2024
4226a14
Apply suggestions from code review
nohwnd Jun 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 22 additions & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,8 @@

> 📦🔐 Pester is now signed. `-SkipPublisherCheck` should no longer be used to install from PowerShell Gallery on Windows 10.

> 📦🔐 If you upgrade to 5.6.0 you will get a "certificate changed" error if you dont skip publisher check. This is related to a new module certificate. [more info here](#regarding-certificate-for-different-versions).
nohwnd marked this conversation as resolved.
Show resolved Hide resolved

> 👩👨 We are looking for contributors! All issues labeled [help wanted](https://github.com/pester/Pester/labels/help%20wanted) are up for grabs. They further split up into [good first issue](https://github.com/pester/Pester/labels/good%20first%20issue) that are issues I hope are easy to solve. [Bad first issue](https://github.com/pester/Pester/labels/bad%20first%20issue) where I expect the implementation to be problematic or needs to be proposed and discussed beforehand. And the rest which is somewhere in the middle. If you decide to pick up an issue please comment in the issue thread so others don't waste their time working on the same issue as you.
> There is also [contributor's guide](https://pester.dev/docs/contributing/introduction) that will hopefully help you.

Expand Down Expand Up @@ -77,6 +79,26 @@ Install-Module -Name Pester -Force

Not running Windows 10 or facing problems? See the [full installation and update guide](https://pester.dev/docs/introduction/installation).

## Regarding Certificate for different versions

with 5.6.0 the certificate used for deplyment has changed. this will give you a error when updating.
below are a list of the used certificates you can expect to be used when importing the module (going back to 2016)
nohwnd marked this conversation as resolved.
Show resolved Hide resolved

Version|Authority|Thumbprint
---|---|---
5.6.0++|`CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1, O="DigiCert, Inc.", C=US`|`2FCC9148EC2C9AB951C6F9654C0D2ED16AF27738`
5.2.0 - 5.5.0|`CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US`|`C7B0582906E5205B8399D92991694A614D0C0B22`
4.10.0 - 5.1.1|`CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US`|`7B9157664392D633EDA2C0248605C1C868EBDE43`
4.4.3 - 4.9.0|`CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US`|`CC1168BAFCDA3B1A5E532DA87E80A4DD69BCAEB1`
3.0.3 - 4.4.2|No Certificate Found|No Certificate Found
3.4.0|`CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US`|`71F53A26BB1625E466727183409A30D03D7923DF`

in all cases in exeption to version 3.4.0, the Authenticode issuer for certificate should be `CN=Jakub Jareš, O=Jakub Jareš, L=Praha, C=CZ`.
nohwnd marked this conversation as resolved.
Show resolved Hide resolved

3.4.0 is a special case as this is the version signed my microsoft and deployed to w10.

nohwnd marked this conversation as resolved.
Show resolved Hide resolved
to fix any issue when using a module that have changed certificate is to append `-SkipPublisherCheck` to the install command.
nohwnd marked this conversation as resolved.
Show resolved Hide resolved

## Features

### Test runner
Expand Down Expand Up @@ -174,7 +196,6 @@ Pester is sponsored by [Octopus Deploy](https://octopus.com).

As well as all the great folks on [OpenCollective](https://opencollective.com/pester) and [GitHub](https://github.com/users/nohwnd/sponsorship#sponsors).


## Contributors

### Code Contributors
Expand Down