CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-08 23:35:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

Sign public certificate without copying its ephemeral private key

Browse Source
This commit is contained in:
Shirofune-Security committed 2026-09-21 17:56:04 +09:00
1 parent 7184918f66
commit a5f674e3f8
3 files changed
+25 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

scripts/Capi2ProbeWorker.ps1
+3 -1
View File
@@ -13,7 +13,9 @@ try {
$rsa=[Security.Cryptography.RSACng]::new($key)
$request=[Security.Cryptography.X509Certificates.CertificateRequest]::new(('CN=WelaCapi2Probe_'+$Nonce),$rsa,[Security.Cryptography.HashAlgorithmName]::SHA256,[Security.Cryptography.RSASignaturePadding]::Pkcs1)
$now=[DateTimeOffset][Wela.WmiProbe.Native]::UtcNow()
$certificate=$request.CreateSelfSigned($now.AddMinutes(-5),$now.AddMinutes(5))
$generator=[Security.Cryptography.X509Certificates.X509SignatureGenerator]::CreateForRSA($rsa,[Security.Cryptography.RSASignaturePadding]::Pkcs1)
$certificate=$request.Create($request.SubjectName,$generator,$now.AddMinutes(-5),$now.AddMinutes(5),[guid]::NewGuid().ToByteArray())
if($certificate.HasPrivateKey){throw 'Only a public certificate is expected.'}
$der=$certificate.Export([Security.Cryptography.X509Certificates.X509ContentType]::Cert)
$started=[Wela.WmiProbe.Native]::UtcNow()
$chain=[Wela.Capi2Probe.Native]::Build($der)