honzajscz / sninstallpfx Goto Github PK

Running SnInstallPfx for a particular certificate in Jenkins yielded an exception with the following stack trace:

Unhandled Exception: System.Security.Cryptography.CryptographicException: Object already exists.

    at System.Security.Cryptography.CryptographicException.ThrowCryptographicException(Int32 hr)
    at System.Security.Cryptography.Utils._CreateCSP(CspParameters param, Boolean randomKeyContainer, SafeProvHandle& hProv)
    at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)
    at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle)
    at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()
    at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize)
    at SnInstallPfx.SnInstallPfx.Main(String[] args)

After some digging, I realized that before finding & trying SnInstallPfx.exe, I'd logged into the server and created that container myself (which of course didn't help Jenkins, running under a different account). Logging back into the server and deleting my copy of the container solved the issue for me.

FYI, I'll ship you a PR regarding this very soon that simply catches the CryptographicException and provides a useful error message. There's likely something more elegant & useful to be done inside ResolveKeySourceTask.IsContainerInstalled. I'm not comfortable enough with keys & containers to attempt that myself, but I thought a minimal PR would be a better "thank you" for providing this tool than no PR at all.

Hi thanks for making this tool!

Currently I use this in a GitHub action and manually download the .exe using Invoke-WebRequest https://github.com/honzajscz/SnInstallPfx/releases/download/0.1.2-beta/SnInstallPfx.exe -OutFile SnInstallPfx.exe in powershell. It would be convenient if this tool got added to the Action Marketplace, such that it can be easily added to a workflow.

i used this to install my pfx certificat and still Cannot import the following key file: igakey.pfx. part of my dockerfile :

SHELL ["cmd", "/S", "/C"]
RUN powershell -Command $ErrorActionPreference = 'Stop'; $ProgressPreference = 'SilentlyContinue'; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12; Invoke-WebRequest https://github.com/honzajscz/SnInstallPfx/releases/download/0.1.2-beta/SnInstallPfx.exe -OutFile SnInstallPfx.exe
RUN SnInstallPfx.exe ./DTOPrestation/igakey.pfx ***********
RUN SnInstallPfx.exe ./CommonDataV2/igaKey.pfx *********
RUN SnInstallPfx.exe ./SAGILEA_WEB/Resources/SagileaWeb.pfx *******
RUN SnInstallPfx.exe ./SEPAVirement/igaKey.pfx **********
RUN SnInstallPfx.exe ./Normes/DSN_Parametrage/DSN_ParamDAL/igaKey.pfx ********
SHELL ["powershell", "-Command"]

WORKDIR /inetpub/wwwroot/SAGILEA_WEB/WebApplication/
RUN msbuild ./WebApplication.csproj /property:Configuration=Release

Error :
C:\Program Files (x86)\Microsoft Visual Studio\2019\BuildTools\MSBuild\Current\Bin\Microsoft.Common.CurrentVersion.targets(3222,5): error MSB3325: Cannot import the following key file: igakey.pfx. The key file may be password protected. To correct this, try to import the certificate again or manually install the certificate to the Strong Name CSP with the following key container name: VS_KEY_1E532C4C0BA55C05 [C:\inetpub\wwwroot\DTOPrestation\DTOPrestation.csproj]
C:\Program Files (x86)\Microsoft Visual Studio\2019\BuildTools\MSBuild\Current\Bin\Microsoft.Common.CurrentVersion.targets(3222,5): error MSB3321: Importing key file "igakey.pfx" was canceled. [C:\inetpub\wwwroot\DTOPrestation\DTOPrestation.csproj].................