psNSXT

0.2.0

Private/SSL.ps1

                                #

# Copyright 2018, Alexis La Goutte <alexis dot lagoutte at gmail dot com>

#

# SPDX-License-Identifier: Apache-2.0

#

Function Set-NSXTUntrustedSSL {

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute("PSUseShouldProcessforStateChangingFunctions", "")]

    Param(  )

    # Hack for allowing untrusted SSL certs with https connections

    Add-Type -TypeDefinition @"

    using System.Net;

    using System.Security.Cryptography.X509Certificates;

    public class TrustAllCertsPolicy : ICertificatePolicy {

        public bool CheckValidationResult(

        ServicePoint srvPoint, X509Certificate certificate,

        WebRequest request, int certificateProblem) {

            return true;

        }

    }

"@

    [System.Net.ServicePointManager]::CertificatePolicy = New-Object -TypeName TrustAllCertsPolicy

}

Function Set-NSXTCipherSSL {

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute("PSUseShouldProcessforStateChangingFunctions", "")]

    Param(  )

    # Hack for allowing TLS 1.1 and TLS 1.2 (by default it is only SSL3 and TLS (1.0))

    $AllProtocols = [System.Net.SecurityProtocolType]'Ssl3,Tls,Tls11,Tls12'

    [System.Net.ServicePointManager]::SecurityProtocol = $AllProtocols

}