Merge 3.0.3 to main (#189)

* release: 3.0.0

3.0.0

* As of this version of the extension, SANs will be handled through the ODKG Enrollment page in Command, and will no longer use the SAN Entry Parameter. This version, we are removing the Entry Parameter "SAN" from the integration-manifest.json, but will still support previous versions of Command in the event the SAN Entry Parameter is passed. The next major version (4.0) will remove all support for the SAN Entry Parameter.
* Added WinADFS Store Type for rotating certificates in ADFS environments.  Please note, only the service-communications certificate is rotated throughout your farm.
* Internal only: Added Integration Tests to aid in future development and testing.
* Improved messaging in the event an Entry Parameter is missing (or does not meet the casing requirements)
* Fixed the SNI/SSL flag being returned during inventory, now returns extended SSL flags
* Fixed the SNI/SSL flag when binding the certificate to allow for extended SSL flags
* Added SSL Flag validation to make sure the bit flag is correct.  These are the valid bit flags for the version of 

Windows:


 ### Windows Server 2012 R2 / Windows 8.1 and earlier (IIS 8.5):

  * 0	No SNI
  * 1	Use SNI
  * 2	Use Centralized SSL certificate store.

  ### Windows Server 2016 (IIS 10.0):

  * 0	No SNI
  * 1	Use SNI
  * 4	Disable HTTP/2.

  ### Windows Server 2019 (IIS 10.0.17763)

  * 0	No SNI
  * 1	Use SNI
  * 4	Disable HTTP/2.
  * 8	Disable OCSP Stapling.

  ### Windows Server 2022+ (IIS 10.0.20348+)

  * 0	No SNI
  * 1	Use SNI
  * 4	Disable HTTP/2.
  * 8	Disable OCSP Stapling.
  * 16	Disable QUIC.
  * 32	Disable TLS 1.3 over TCP.
  * 64	Disable Legacy TLS.

---------

Co-authored-by: Bob Pokorny <bpokorny@keyfactor.com>
Co-authored-by: Keyfactor <keyfactor@keyfactor.github.io>

* Release: 3.0.1 

* Fixed an issues when renewing ECC Certificates

* Update generated docs

* validating documentation for IIS/SSL Flags.

* Update generated docs

---------

Co-authored-by: Bob Pokorny <bpokorny@keyfactor.com>
Co-authored-by: Keyfactor <keyfactor@keyfactor.github.io>

* SQL Services not restarting (#186)

* Fix problem only SQL Service was getting restarted while the other SQL Services would not restart.

* Update generated docs

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Update generated docs

* Delete local.runsettings

---------

Co-authored-by: Bob Pokorny <bpokorny@keyfactor.com>
Co-authored-by: Keyfactor <keyfactor@keyfactor.github.io>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Updated the PowerShell SDK to 7.4.17 to address a vulnerability in the System.Security.Cryptography.XML package (#188)

Co-authored-by: Bob Pokorny <bpokorny@keyfactor.com>

---------

Co-authored-by: Bob Pokorny <55611381+rcpokorny@users.noreply.github.com>
Co-authored-by: Bob Pokorny <bpokorny@keyfactor.com>
Co-authored-by: Keyfactor <keyfactor@keyfactor.github.io>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: 5 people

CHANGELOG.md

@@ -1,3 +1,6 @@
+3.0.3
+* Updated the PowerShell SDK to 7.4.17 to address a vulnerability in the System.Security.Cryptography.XML package.
+
 3.0.2
 * Fixed SQL service restart behavior: previously the extension could stop multiple SQL services and fail to start all of them. It now restarts only the SQL service associated with the certificate being renewed.
 

IISU/WindowsCertStore.csproj

@@ -36,7 +36,7 @@
 		<PackageReference Include="Keyfactor.Orchestrators.Common" Version="3.2.0" />
 		<PackageReference Include="Keyfactor.Orchestrators.IOrchestratorJobExtensions" Version="1.0.0" />
 		<PackageReference Include="Microsoft.Management.Infrastructure" Version="3.0.0" Condition="'$(TargetFramework)' == 'net6.0'" />
-		<PackageReference Include="Microsoft.PowerShell.SDK" Version="7.4.13" Condition="'$(TargetFramework)' == 'net8.0'" />
+		<PackageReference Include="Microsoft.PowerShell.SDK" Version="7.4.17" Condition="'$(TargetFramework)' == 'net8.0'" />
 		<PackageReference Include="runtime.linux-arm64.runtime.native.System.IO.Ports" Version="9.0.5" />
 		<PackageReference Include="runtime.osx-arm64.runtime.native.System.IO.Ports" Version="9.0.5" />
 		<PackageReference Include="System.Formats.Asn1" Version="8.0.2" Condition="'$(TargetFramework)' == 'net6.0'" />