Updates to SSC Module -- provide better SSL support for Connect-SscServer
Moving the code to set SslProtocol to a separate parameter instead of hiding it under SkipCertificateCheck. Updating Module Version to denote this minor change. Signed-off-by: Brian Wuchner <brian.wuchner@gmail.com>
This commit is contained in:
@@ -17,7 +17,7 @@ SPDX-License-Identifier: BSD-2-Clause
|
|||||||
RootModule = 'SaltStackConfig.psm1'
|
RootModule = 'SaltStackConfig.psm1'
|
||||||
|
|
||||||
# Version number of this module.
|
# Version number of this module.
|
||||||
ModuleVersion = '0.0.5'
|
ModuleVersion = '0.0.6'
|
||||||
|
|
||||||
# Supported PSEditions
|
# Supported PSEditions
|
||||||
# CompatiblePSEditions = @()
|
# CompatiblePSEditions = @()
|
||||||
|
|||||||
@@ -36,7 +36,8 @@ Function Connect-SscServer {
|
|||||||
[Parameter(Mandatory=$true, ParameterSetName='PlainText', Position=2)][ValidateNotNullOrEmpty()][string]$password,
|
[Parameter(Mandatory=$true, ParameterSetName='PlainText', Position=2)][ValidateNotNullOrEmpty()][string]$password,
|
||||||
[Parameter(Mandatory=$false, Position=3)][string]$AuthSource='internal',
|
[Parameter(Mandatory=$false, Position=3)][string]$AuthSource='internal',
|
||||||
[Parameter(Mandatory=$false, ParameterSetName='Credential')][PSCredential]$Credential,
|
[Parameter(Mandatory=$false, ParameterSetName='Credential')][PSCredential]$Credential,
|
||||||
[Parameter(Mandatory=$false)][Switch]$SkipCertificateCheck
|
[Parameter(Mandatory=$false)][Switch]$SkipCertificateCheck,
|
||||||
|
[Parameter(Mandatory=$false)][ValidateSet('Tls13','Tls12','Tls11','Tls','SystemDefault')]$SslProtocol
|
||||||
)
|
)
|
||||||
|
|
||||||
if ($PSCmdlet.ParameterSetName -eq 'Credential' -AND $Credential -eq $null) { $Credential = Get-Credential}
|
if ($PSCmdlet.ParameterSetName -eq 'Credential' -AND $Credential -eq $null) { $Credential = Get-Credential}
|
||||||
@@ -58,10 +59,13 @@ Function Connect-SscServer {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
"@
|
"@
|
||||||
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]'Tls,Tls11,Tls12'
|
|
||||||
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy
|
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy
|
||||||
} # end if SkipCertificate Check
|
} # end if SkipCertificate Check
|
||||||
|
|
||||||
|
if ($SslProtocol) {
|
||||||
|
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]$SslProtocol
|
||||||
|
}
|
||||||
|
|
||||||
$loginBody = @{'username'=$username; 'password'=$password; 'config_name'=$AuthSource}
|
$loginBody = @{'username'=$username; 'password'=$password; 'config_name'=$AuthSource}
|
||||||
try {
|
try {
|
||||||
$webRequest = Invoke-WebRequest -Uri "https://$server/account/login" -SessionVariable ws
|
$webRequest = Invoke-WebRequest -Uri "https://$server/account/login" -SessionVariable ws
|
||||||
|
|||||||
Reference in New Issue
Block a user