diff --git a/Modules/SaltStackConfig/SaltStackConfig.psm1 b/Modules/SaltStackConfig/SaltStackConfig.psm1 index cf2d5f8..f714f4e 100644 --- a/Modules/SaltStackConfig/SaltStackConfig.psm1 +++ b/Modules/SaltStackConfig/SaltStackConfig.psm1 @@ -35,7 +35,8 @@ Function Connect-SscServer { [Parameter(Mandatory=$true, ParameterSetName='PlainText', Position=1)][string]$username, [Parameter(Mandatory=$true, ParameterSetName='PlainText', Position=2)][ValidateNotNullOrEmpty()][string]$password, [Parameter(Mandatory=$false, Position=3)][string]$AuthSource='internal', - [Parameter(Mandatory=$false, ParameterSetName='Credential')][PSCredential]$Credential + [Parameter(Mandatory=$false, ParameterSetName='Credential')][PSCredential]$Credential, + [Parameter(Mandatory=$false)][Switch]$SkipCertificateCheck ) if ($PSCmdlet.ParameterSetName -eq 'Credential' -AND $Credential -eq $null) { $Credential = Get-Credential} @@ -43,6 +44,23 @@ Function Connect-SscServer { $username = $Credential.GetNetworkCredential().username $password = $Credential.GetNetworkCredential().password } + + if ($SkipCertificateCheck) { + # This if statement is using example code from https://stackoverflow.com/questions/11696944/powershell-v3-invoke-webrequest-https-error + add-type @" + using System.Net; + using System.Security.Cryptography.X509Certificates; + public class TrustAllCertsPolicy : ICertificatePolicy { + public bool CheckValidationResult( + ServicePoint srvPoint, X509Certificate certificate, + WebRequest request, int certificateProblem) { + return true; + } + } +"@ + [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]'Tls,Tls11,Tls12' + [System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy + } # end if SkipCertificate Check $loginBody = @{'username'=$username; 'password'=$password; 'config_name'=$AuthSource} try {