3 Commits

Include renames

Author	SHA1	Message	Date
spencermandClaude Opus 5.5	90adcebc44	scripts: vsql certificate script fixes the six review findings, with a Pester suite on PowerShell 5.1 and 7 ... - Admin check uses -not (IsAdmin); the old call passed -eq $false as arguments. - Named instances: WQL filter Name='MSSQL$DEV' unescaped, lookup errors surface. - SANs decoded from the raw extension (DER walk) and matched as whole names. - Immutable deploy-, request- and rollback- records; already-bound instances get no snapshot; -Rollback takes the newest snapshot not yet rolled back, -Snapshot picks one. - certreq -new, -submit, -accept and the key grants go through ShouldProcess; a declined or failed prerequisite binds nothing. - Rollback and automatic restore work per instance, read back, report failures. Also found while testing: PowerShell 7 returns RSACng for a CSP key, so the provider check now reads CERT_KEY_PROV_INFO; ForEach-Object member form returned nothing under -WhatIf; stderr capture under Stop threw on 5.1; LocalSystem and NetworkService accounts go to icacls as SIDs; SQL Agent is started again after a restart; signature checked by OID. DEPLOY.md gains the run procedure: preflight, DEV, docker-1 checks, production, rollback. Co-Authored-By: Claude Opus 5.5 <[email protected]>	2026-10-18 21:41:03 -06:00
spencermandClaude Fable 5.1	850e1da3a9	scripts: vsql certificate request uses the legacy SChannel CSP with an exchange key, validates before binding, scopes key access, saves bindings for rollback, resumes pending requests ... Co-Authored-By: Claude Fable 5.1 <[email protected]>	2026-10-18 21:19:39 -06:00
spencermandClaude Fable 5.1	fdfb8ae40f	scripts: Request-VsqlServerCertificate.ps1 requests and installs a SQL Server TLS certificate from PESCO-PSYLOCKE-CA ... Co-Authored-By: Claude Fable 5.1 <[email protected]>	2026-10-18 21:15:49 -06:00