Skip to content

Commit fab1145

Browse files
authored
Merge branch 'testing' into add-esc16
2 parents ef22347 + 7425baf commit fab1145

3 files changed

Lines changed: 14 additions & 10 deletions

File tree

Invoke-Locksmith.ps1

Lines changed: 7 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1598,7 +1598,8 @@ function Find-ESC7 {
15981598
}
15991599
if ($UnsafeCAAdministrators) {
16001600
$Issue.Issue = $Issue.Issue + @"
1601-
Unexpected prinicipals ($($UnsafeCAAdministrators -join ', ')) are granted "CA Administrator" rights on this Certification Authority.
1601+
Unexpected principals are granted "CA Administrator" rights on this Certification Authority.
1602+
Unsafe CA Administrators: $($UnsafeCAAdministrators -join ', ').
16021603
16031604
"@
16041605
$Issue.Fix = $Issue.Fix + @"
@@ -1612,15 +1613,16 @@ Reinstate CA Administrator rights for $($UnsafeCAAdministrators -join ', ')
16121613
}
16131614
if ($UnsafeCertificateManagers) {
16141615
$Issue.Issue = $Issue.Issue + @"
1615-
Unexpected prinicipals ($($UnsafeCertificateManagers -join ', ')) are granted "Certificate Manager" rights on this Certification Authority.
1616+
Unexpected principals are granted "Certificate Manager" rights on this Certification Authority.
1617+
Unexpected Principals: $($UnsafeCertificateManagers -join ', ')
16161618
16171619
"@
16181620
$Issue.Fix = $Issue.Fix + @"
1619-
Revoke CA Administrator rights from $($UnsafeCertificateManagers -join ', ')
1621+
Revoke Certificate Manager rights from $($UnsafeCertificateManagers -join ', ')
16201622
16211623
"@
16221624
$Issue.Revert = $Issue.Revert + @"
1623-
Reinstate CA Administrator rights for $($UnsafeCertificateManagers -join ', ')
1625+
Reinstate Certificate Manager rights for $($UnsafeCertificateManagers -join ', ')
16241626
16251627
"@
16261628
}
@@ -4653,7 +4655,7 @@ function Invoke-Locksmith {
46534655
[System.Management.Automation.PSCredential]$Credential
46544656
)
46554657

4656-
$Version = '2025.5.17'
4658+
$Version = '2025.5.18'
46574659
$LogoPart1 = @'
46584660
_ _____ _______ _ _ _______ _______ _____ _______ _ _
46594661
| | | | |____/ |______ | | | | | |_____|

Locksmith.psd1

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
FunctionsToExport = 'Invoke-Locksmith'
99
GUID = 'b1325b42-8dc4-4f17-aa1f-dcb5984ca14a'
1010
HelpInfoURI = 'https://raw.githubusercontent.com/jakehildreth/Locksmith/main/en-US/'
11-
ModuleVersion = '2025.5.17'
11+
ModuleVersion = '2025.5.18'
1212
PowerShellVersion = '5.1'
1313
PrivateData = @{
1414
PSData = @{

Private/Find-ESC7.ps1

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,8 @@
6464
}
6565
if ($UnsafeCAAdministrators) {
6666
$Issue.Issue = $Issue.Issue + @"
67-
Unexpected prinicipals ($($UnsafeCAAdministrators -join ', ')) are granted "CA Administrator" rights on this Certification Authority.
67+
Unexpected principals are granted "CA Administrator" rights on this Certification Authority.
68+
Unsafe CA Administrators: $($UnsafeCAAdministrators -join ', ').
6869
6970
"@
7071
$Issue.Fix = $Issue.Fix + @"
@@ -78,15 +79,16 @@ Reinstate CA Administrator rights for $($UnsafeCAAdministrators -join ', ')
7879
}
7980
if ($UnsafeCertificateManagers) {
8081
$Issue.Issue = $Issue.Issue + @"
81-
Unexpected prinicipals ($($UnsafeCertificateManagers -join ', ')) are granted "Certificate Manager" rights on this Certification Authority.
82+
Unexpected principals are granted "Certificate Manager" rights on this Certification Authority.
83+
Unexpected Principals: $($UnsafeCertificateManagers -join ', ')
8284
8385
"@
8486
$Issue.Fix = $Issue.Fix + @"
85-
Revoke CA Administrator rights from $($UnsafeCertificateManagers -join ', ')
87+
Revoke Certificate Manager rights from $($UnsafeCertificateManagers -join ', ')
8688
8789
"@
8890
$Issue.Revert = $Issue.Revert + @"
89-
Reinstate CA Administrator rights for $($UnsafeCertificateManagers -join ', ')
91+
Reinstate Certificate Manager rights for $($UnsafeCertificateManagers -join ', ')
9092
9193
"@
9294
}

0 commit comments

Comments
 (0)