🎉 Improved script naming and removed unnecessary file 🎇
This commit is contained in:
parent
c849e37493
commit
eadb7eedc4
@ -1,374 +0,0 @@
|
|||||||
# Mercedes-Benz SSL-Zertifikat-Installationsskript für Windows
|
|
||||||
# Installiert notwendige Zertifikate für sichere Netzwerkverbindungen
|
|
||||||
|
|
||||||
param(
|
|
||||||
[switch]$Force,
|
|
||||||
[switch]$Verbose
|
|
||||||
)
|
|
||||||
|
|
||||||
# Fehlerbehandlung
|
|
||||||
$ErrorActionPreference = "Stop"
|
|
||||||
|
|
||||||
# Emojis und Farben für bessere Ausgabe
|
|
||||||
$SUCCESS = "✅"
|
|
||||||
$ERROR = "❌"
|
|
||||||
$WARNING = "⚠️"
|
|
||||||
$INFO = "ℹ️"
|
|
||||||
$CERT = "🔐"
|
|
||||||
$MERCEDES = "🏎️"
|
|
||||||
|
|
||||||
# Logging-Funktionen
|
|
||||||
function Write-Success { param($Message) Write-Host "$SUCCESS $Message" -ForegroundColor Green }
|
|
||||||
function Write-Error { param($Message) Write-Host "$ERROR $Message" -ForegroundColor Red }
|
|
||||||
function Write-Warning { param($Message) Write-Host "$WARNING $Message" -ForegroundColor Yellow }
|
|
||||||
function Write-Info { param($Message) Write-Host "$INFO $Message" -ForegroundColor Blue }
|
|
||||||
|
|
||||||
# Header
|
|
||||||
Write-Host ""
|
|
||||||
Write-Host "$MERCEDES Mercedes-Benz SSL-Zertifikat-Installation $MERCEDES" -ForegroundColor Blue
|
|
||||||
Write-Host "=================================================================="
|
|
||||||
Write-Host ""
|
|
||||||
|
|
||||||
# Administrator-Rechte prüfen
|
|
||||||
function Test-Administrator {
|
|
||||||
$currentUser = [Security.Principal.WindowsIdentity]::GetCurrent()
|
|
||||||
$principal = New-Object Security.Principal.WindowsPrincipal($currentUser)
|
|
||||||
return $principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
|
|
||||||
}
|
|
||||||
|
|
||||||
if (-not (Test-Administrator)) {
|
|
||||||
Write-Error "Dieses Skript muss als Administrator ausgeführt werden!"
|
|
||||||
Write-Info "Starten Sie PowerShell als Administrator und führen Sie das Skript erneut aus."
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
|
|
||||||
# Zertifikat-Verzeichnisse erstellen
|
|
||||||
function New-CertificateDirectories {
|
|
||||||
Write-Info "Erstelle Zertifikat-Verzeichnisse..."
|
|
||||||
|
|
||||||
$directories = @(
|
|
||||||
"certs\mercedes\root",
|
|
||||||
"certs\mercedes\intermediate",
|
|
||||||
"certs\mercedes\server",
|
|
||||||
"certs\backup"
|
|
||||||
)
|
|
||||||
|
|
||||||
foreach ($dir in $directories) {
|
|
||||||
if (-not (Test-Path $dir)) {
|
|
||||||
New-Item -ItemType Directory -Path $dir -Force | Out-Null
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
Write-Success "Zertifikat-Verzeichnisse erstellt"
|
|
||||||
}
|
|
||||||
|
|
||||||
# Mercedes-Benz Root-Zertifikate erstellen
|
|
||||||
function New-MercedesRootCertificates {
|
|
||||||
Write-Info "$CERT Erstelle Mercedes-Benz Root-Zertifikate..."
|
|
||||||
|
|
||||||
# Mercedes-Benz Corporate Root CA (Platzhalter)
|
|
||||||
$mercedesRootCert = @"
|
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIDXTCCAkWgAwIBAgIJAKoK/heBjcOuMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
|
|
||||||
BAYTAkRFMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX
|
|
||||||
aWRnaXRzIFB0eSBMdGQwHhcNMjQwMTAxMDAwMDAwWhcNMzQwMTAxMDAwMDAwWjBF
|
|
||||||
MQswCQYDVQQGEwJERTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50
|
|
||||||
ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
|
|
||||||
CgKCAQEAuIj/82u+f1n3c3fpjwNnFOKBY4/l0f+uKKDVzYWOQbIQc+7qvgfKGoI+
|
|
||||||
UqK3QmXRJb26fidjMuFdC4XJBOmLg+mSRnZskQdJVFI5gVBELWw+YC+cINhycXy4
|
|
||||||
V8turPrzhkfinDiB40+hLRlhGtjdQWspUXLoRhNT+Hf6+5rOKFHPbFHjzuDMFXXF
|
|
||||||
XrVhLVyIjYK+wFXGAVBgAsEAtLA+KjIww+eApVL+bJXhkws1Vx+cPkvsYGSGcq2ϕ
|
|
||||||
QIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQCfmyGoGWI0+1QQiap6EcOXAXJeIpkPGU
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
"@
|
|
||||||
|
|
||||||
# Daimler AG Root CA (Platzhalter)
|
|
||||||
$daimlerRootCert = @"
|
|
||||||
-----BEGIN CERTIFICATE-----
|
|
||||||
MIIDXTCCAkWgAwIBAgIJAKoK/heBjcOuMA0GCSqGSIb3DQEBBQUAMEUxCzAJBgNV
|
|
||||||
BAYTAkRFMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRlcm5ldCBX
|
|
||||||
aWRnaXRzIFB0eSBMdGQwHhcNMjQwMTAxMDAwMDAwWhcNMzQwMTAxMDAwMDAwWjBF
|
|
||||||
MQswCQYDVQQGEwJERTETMBEGA1UECAwKU29tZS1TdGF0ZTEhMB8GA1UECgwYSW50
|
|
||||||
ZXJuZXQgV2lkZ2l0cyBQdHkgTHRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
|
|
||||||
CgKCAQEAuIj/82u+f1n3c3fpjwNnFOKBY4/l0f+uKKDVzYWOQbIQc+7qvgfKGoI+
|
|
||||||
UqK3QmXRJb26fidjMuFdC4XJBOmLg+mSRnZskQdJVFI5gVBELWw+YC+cINhycXy4
|
|
||||||
V8turPrzhkfinDiB40+hLRlhGtjdQWspUXLoRhNT+Hf6+5rOKFHPbFHjzuDMFXXF
|
|
||||||
XrVhLVyIjYK+wFXGAVBgAsEAtLA+KjIww+eApVL+bJXhkws1Vx+cPkvsYGSGcq2ϕ
|
|
||||||
QIDAQABMA0GCSqGSIb3DQEBBQUAA4IBAQCfmyGoGWI0+1QQiap6EcOXAXJeIpkPGU
|
|
||||||
-----END CERTIFICATE-----
|
|
||||||
"@
|
|
||||||
|
|
||||||
# Zertifikate in Dateien speichern
|
|
||||||
$mercedesRootCert | Out-File -FilePath "certs\mercedes\root\mercedes-root-ca.crt" -Encoding ASCII
|
|
||||||
$daimlerRootCert | Out-File -FilePath "certs\mercedes\root\daimler-root-ca.crt" -Encoding ASCII
|
|
||||||
|
|
||||||
Write-Success "Mercedes-Benz Root-Zertifikate erstellt"
|
|
||||||
}
|
|
||||||
|
|
||||||
# Zertifikate in Windows-Zertifikatsspeicher installieren
|
|
||||||
function Install-WindowsCertificates {
|
|
||||||
Write-Info "Installiere Zertifikate in Windows-Zertifikatsspeicher..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
# Root-Zertifikate installieren
|
|
||||||
$certFiles = Get-ChildItem -Path "certs\mercedes\root\*.crt"
|
|
||||||
|
|
||||||
foreach ($certFile in $certFiles) {
|
|
||||||
Write-Info "Installiere: $($certFile.Name)"
|
|
||||||
|
|
||||||
# Zertifikat in Trusted Root Certification Authorities installieren
|
|
||||||
Import-Certificate -FilePath $certFile.FullName -CertStoreLocation "Cert:\LocalMachine\Root" -Verbose:$Verbose
|
|
||||||
|
|
||||||
# Zertifikat auch in Current User installieren
|
|
||||||
Import-Certificate -FilePath $certFile.FullName -CertStoreLocation "Cert:\CurrentUser\Root" -Verbose:$Verbose
|
|
||||||
}
|
|
||||||
|
|
||||||
Write-Success "Windows-Zertifikate erfolgreich installiert"
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Error "Fehler beim Installieren der Windows-Zertifikate: $($_.Exception.Message)"
|
|
||||||
throw
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Internet Explorer/Edge Zertifikate aktualisieren
|
|
||||||
function Update-IECertificates {
|
|
||||||
Write-Info "Aktualisiere Internet Explorer/Edge Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
# IE-Zertifikatscache leeren
|
|
||||||
Start-Process -FilePath "rundll32.exe" -ArgumentList "wininet.dll,DispatchAPICall 3" -Wait -NoNewWindow
|
|
||||||
|
|
||||||
Write-Success "IE/Edge Zertifikate aktualisiert"
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Konnte IE/Edge Zertifikate nicht aktualisieren: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Chrome/Chromium Zertifikate installieren
|
|
||||||
function Install-ChromeCertificates {
|
|
||||||
Write-Info "Installiere Chrome/Chromium Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
# Chrome verwendet Windows-Zertifikatsspeicher, daher bereits installiert
|
|
||||||
Write-Success "Chrome verwendet Windows-Zertifikatsspeicher (bereits installiert)"
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Chrome-Zertifikat-Installation fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Firefox Zertifikate installieren
|
|
||||||
function Install-FirefoxCertificates {
|
|
||||||
Write-Info "Installiere Firefox Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
# Firefox-Profile finden
|
|
||||||
$firefoxProfiles = Get-ChildItem -Path "$env:APPDATA\Mozilla\Firefox\Profiles" -Directory -ErrorAction SilentlyContinue
|
|
||||||
|
|
||||||
if ($firefoxProfiles) {
|
|
||||||
foreach ($profile in $firefoxProfiles) {
|
|
||||||
$certdbPath = Join-Path $profile.FullName "cert9.db"
|
|
||||||
if (Test-Path $certdbPath) {
|
|
||||||
Write-Info "Firefox-Profil gefunden: $($profile.Name)"
|
|
||||||
# Hier würde normalerweise certutil verwendet werden
|
|
||||||
# Da certutil nicht standardmäßig verfügbar ist, überspringen wir dies
|
|
||||||
}
|
|
||||||
}
|
|
||||||
Write-Success "Firefox-Profile verarbeitet"
|
|
||||||
} else {
|
|
||||||
Write-Info "Keine Firefox-Profile gefunden"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Firefox-Zertifikat-Installation fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Python Zertifikate aktualisieren
|
|
||||||
function Update-PythonCertificates {
|
|
||||||
Write-Info "Aktualisiere Python-Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
# Python certifi-Paket aktualisieren
|
|
||||||
if (Get-Command python -ErrorAction SilentlyContinue) {
|
|
||||||
python -m pip install --upgrade certifi --quiet
|
|
||||||
Write-Success "Python certifi-Paket aktualisiert"
|
|
||||||
} elseif (Get-Command python3 -ErrorAction SilentlyContinue) {
|
|
||||||
python3 -m pip install --upgrade certifi --quiet
|
|
||||||
Write-Success "Python3 certifi-Paket aktualisiert"
|
|
||||||
} else {
|
|
||||||
Write-Info "Python nicht gefunden - überspringe Python-Zertifikat-Update"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Python-Zertifikat-Update fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Node.js Zertifikate konfigurieren
|
|
||||||
function Set-NodeJSCertificates {
|
|
||||||
Write-Info "Konfiguriere Node.js Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
if (Get-Command node -ErrorAction SilentlyContinue) {
|
|
||||||
# Umgebungsvariable für Node.js setzen
|
|
||||||
$certPath = (Resolve-Path "certs\mercedes\root\mercedes-root-ca.crt").Path
|
|
||||||
[Environment]::SetEnvironmentVariable("NODE_EXTRA_CA_CERTS", $certPath, "Machine")
|
|
||||||
|
|
||||||
Write-Success "Node.js Zertifikate konfiguriert"
|
|
||||||
} else {
|
|
||||||
Write-Info "Node.js nicht gefunden - überspringe Node.js-Konfiguration"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Node.js-Zertifikat-Konfiguration fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Git Zertifikate konfigurieren
|
|
||||||
function Set-GitCertificates {
|
|
||||||
Write-Info "Konfiguriere Git Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
if (Get-Command git -ErrorAction SilentlyContinue) {
|
|
||||||
$certPath = (Resolve-Path "certs\mercedes\root\mercedes-root-ca.crt").Path
|
|
||||||
git config --global http.sslCAInfo $certPath
|
|
||||||
|
|
||||||
Write-Success "Git Zertifikate konfiguriert"
|
|
||||||
} else {
|
|
||||||
Write-Info "Git nicht gefunden - überspringe Git-Konfiguration"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Git-Zertifikat-Konfiguration fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Umgebungsvariablen setzen
|
|
||||||
function Set-EnvironmentVariables {
|
|
||||||
Write-Info "Setze Umgebungsvariablen..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
$certPath = (Resolve-Path "certs\mercedes\root\mercedes-root-ca.crt").Path
|
|
||||||
$certDir = (Resolve-Path "certs\mercedes\root").Path
|
|
||||||
|
|
||||||
# System-Umgebungsvariablen setzen
|
|
||||||
[Environment]::SetEnvironmentVariable("SSL_CERT_FILE", $certPath, "Machine")
|
|
||||||
[Environment]::SetEnvironmentVariable("SSL_CERT_DIR", $certDir, "Machine")
|
|
||||||
[Environment]::SetEnvironmentVariable("REQUESTS_CA_BUNDLE", $certPath, "Machine")
|
|
||||||
[Environment]::SetEnvironmentVariable("CURL_CA_BUNDLE", $certPath, "Machine")
|
|
||||||
|
|
||||||
# Für aktuelle Session
|
|
||||||
$env:SSL_CERT_FILE = $certPath
|
|
||||||
$env:SSL_CERT_DIR = $certDir
|
|
||||||
$env:REQUESTS_CA_BUNDLE = $certPath
|
|
||||||
$env:CURL_CA_BUNDLE = $certPath
|
|
||||||
|
|
||||||
Write-Success "Umgebungsvariablen gesetzt"
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Umgebungsvariablen konnten nicht gesetzt werden: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Zertifikat-Validierung
|
|
||||||
function Test-Certificates {
|
|
||||||
Write-Info "Validiere installierte Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
# Windows-Zertifikatsspeicher prüfen
|
|
||||||
$installedCerts = Get-ChildItem -Path "Cert:\LocalMachine\Root" | Where-Object { $_.Subject -like "*Mercedes*" -or $_.Subject -like "*Daimler*" }
|
|
||||||
|
|
||||||
if ($installedCerts) {
|
|
||||||
Write-Success "Mercedes-Benz Zertifikate im Windows-Speicher gefunden: $($installedCerts.Count)"
|
|
||||||
} else {
|
|
||||||
Write-Warning "Keine Mercedes-Benz Zertifikate im Windows-Speicher gefunden"
|
|
||||||
}
|
|
||||||
|
|
||||||
# HTTPS-Verbindung testen
|
|
||||||
try {
|
|
||||||
$response = Invoke-WebRequest -Uri "https://httpbin.org/get" -UseBasicParsing -TimeoutSec 10
|
|
||||||
if ($response.StatusCode -eq 200) {
|
|
||||||
Write-Success "HTTPS-Verbindungstest erfolgreich"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "HTTPS-Verbindungstest fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Zertifikat-Validierung fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Backup erstellen
|
|
||||||
function New-CertificateBackup {
|
|
||||||
Write-Info "Erstelle Backup der ursprünglichen Zertifikate..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
$backupDate = Get-Date -Format "yyyyMMdd_HHmmss"
|
|
||||||
$backupPath = "certs\backup\windows-certs-$backupDate"
|
|
||||||
|
|
||||||
# Windows-Zertifikatsspeicher exportieren
|
|
||||||
$certs = Get-ChildItem -Path "Cert:\LocalMachine\Root"
|
|
||||||
$exportPath = "$backupPath\root-certificates.p7b"
|
|
||||||
|
|
||||||
New-Item -ItemType Directory -Path $backupPath -Force | Out-Null
|
|
||||||
|
|
||||||
# Alle Root-Zertifikate als Collection exportieren
|
|
||||||
$certCollection = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2Collection
|
|
||||||
foreach ($cert in $certs) {
|
|
||||||
$certCollection.Add($cert)
|
|
||||||
}
|
|
||||||
|
|
||||||
$bytes = $certCollection.Export([System.Security.Cryptography.X509Certificates.X509ContentType]::Pkcs7)
|
|
||||||
[System.IO.File]::WriteAllBytes($exportPath, $bytes)
|
|
||||||
|
|
||||||
Write-Success "Backup erstellt: $backupPath"
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Warning "Backup-Erstellung fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Hauptfunktion
|
|
||||||
function Main {
|
|
||||||
Write-Info "Starte Mercedes-Benz Zertifikat-Installation für Windows..."
|
|
||||||
|
|
||||||
try {
|
|
||||||
New-CertificateBackup
|
|
||||||
New-CertificateDirectories
|
|
||||||
New-MercedesRootCertificates
|
|
||||||
Install-WindowsCertificates
|
|
||||||
Update-IECertificates
|
|
||||||
Install-ChromeCertificates
|
|
||||||
Install-FirefoxCertificates
|
|
||||||
Update-PythonCertificates
|
|
||||||
Set-NodeJSCertificates
|
|
||||||
Set-GitCertificates
|
|
||||||
Set-EnvironmentVariables
|
|
||||||
Test-Certificates
|
|
||||||
|
|
||||||
Write-Host ""
|
|
||||||
Write-Host "=================================================================="
|
|
||||||
Write-Success "$MERCEDES Mercedes-Benz Zertifikat-Installation abgeschlossen!"
|
|
||||||
Write-Host "=================================================================="
|
|
||||||
Write-Host ""
|
|
||||||
Write-Info "Nächste Schritte:"
|
|
||||||
Write-Host " 1. PowerShell/CMD neu starten für Umgebungsvariablen"
|
|
||||||
Write-Host " 2. Browser neu starten für Zertifikat-Erkennung"
|
|
||||||
Write-Host " 3. HTTPS-Verbindungen testen"
|
|
||||||
Write-Host ""
|
|
||||||
Write-Info "Backup-Verzeichnis: $(Resolve-Path 'certs\backup')"
|
|
||||||
Write-Info "Zertifikat-Verzeichnis: $(Resolve-Path 'certs\mercedes')"
|
|
||||||
}
|
|
||||||
catch {
|
|
||||||
Write-Error "Installation fehlgeschlagen: $($_.Exception.Message)"
|
|
||||||
exit 1
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
# Skript ausführen
|
|
||||||
Main
|
|
||||||
Loading…
x
Reference in New Issue
Block a user