批次建立 win-acme 用 DNS Record 取得憑證的任務

批次建立 win-acme 用 DNS Record 取得憑證的任務

$RecordNames = @();
$RecordNames += "www";

$Domain = "contoso.com";

foreach ($RecordName in $RecordNames) {
    
    $FQDN = ($RecordName + '.' + $Domain);
    write-host ('Request Certificate for ' + $FQDN);

    $WacsPath = "C:\Cert\wacs.exe"
    $Arguments = @(
        "--source", "manual",
        "--host", $FQDN,
        "--friendlyname", $FQDN,
        "--validation", "script",
        "--dnscreatescript", "C:\Cert\AzureDNSZoneVerification.ps1",
        "--dnscreatescriptarguments", '-Step "create" -Identifier "{Identifier}" -RecordName "{RecordName}" -Token "{Token}"',
        "--dnsdeletescript", "C:\Cert\AzureDNSZoneVerification.ps1",
        "--dnsdeletescriptarguments", '-Step "delete" -Identifier "{Identifier}" -RecordName "{RecordName}" -Token "{Token}"',
        "--dnsscriptparallelism", "0",
        "--csr", "rsa",
        "--store", "pemfiles",
        "--pemfilespath", "C:\Cert\Cert",
        "--store", "pfxfile",
        "--pfxfilepath", "C:\Cert\Cert",
        "--pfxpassword", "vault://json/p@##w0rd",
        "--installation", "none",
        "--accepttos"
    )
    & $WacsPath @Arguments
};