Provisioning: Add Root Certificate update for Windows

Windows usually updates certificates once a week, but due
to disabling Windows background updates there is need to
install and update certificates manually.

Updating certificates during provisioning is selected method
as it's aligned with the same procedure how linux machines have
handled the same.

Task-number: QTQAINFRA-7001
Pick-to: 6.8 5.15
Change-Id: I7c077b5e08328b12c481a3501736f06baf85e71e
Reviewed-by: Oliver Wolff <oliver.wolff@qt.io>
Reviewed-by: Matti Paaso <matti.paaso@qt.io>
(cherry picked from commit ebcc9a1d10)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
This commit is contained in:
Tero Heikkinen
2025-03-14 08:25:06 +02:00
committed by Qt Cherry-pick Bot
parent faf67533c3
commit 033cc2c181
8 changed files with 19 additions and 0 deletions

View File

@@ -0,0 +1,12 @@
# Copyright (C) 2025 The Qt Company Ltd.
# SPDX-License-Identifier: LicenseRef-Qt-Commercial OR LGPL-3.0-only OR GPL-2.0-only OR GPL-3.0-only
# This script updates Windows Root Certifications which are usually updated weekly by Windows update
. "$PSScriptRoot\helpers.ps1"
$sstCerts = "C:\Windows\Temp\certificates.sst"
Run-Executable "certutil.exe" "-generateSSTFromWU $sstCerts"
$sstCertsPath = (Get-ChildItem -Path $sstCerts)
$sstCertsPath | Import-Certificate -CertStoreLocation "Cert:\LocalMachine\Root" | Out-String | Measure-Object -Line
Remove-Item -Path $sstCerts

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"

View File

@@ -0,0 +1 @@
. "$PSScriptRoot\..\common\windows\certificate-updates.ps1"