From 67c5d26ed33bc4fc57b1772eb63588dace246f5f Mon Sep 17 00:00:00 2001
From: helmut <helmut.andrey@gmail.com>
Date: Thu, 16 Apr 2026 17:03:51 +0500
Subject: [PATCH] Add ssl edit script

---
 Help-D_RDP.pfx | Bin 0 -> 2761 bytes
 installSSL.ps1 | 117 +++++++++++++++++++++++++++++++++++++------------
 2 files changed, 90 insertions(+), 27 deletions(-)
 create mode 100644 Help-D_RDP.pfx

diff --git a/Help-D_RDP.pfx b/Help-D_RDP.pfx
new file mode 100644
index 0000000000000000000000000000000000000000..5480a5d29a3c129fef127f5a303f8cd1be6a11d3
GIT binary patch
literal 2761
zcmZWqc{o&k8$QD{cB8S&Iuu!F8YE0!Tecx;#*$@>!ekjc*)=lAlBOcEMr5lLDQngg
zp|Xc!$`%<kAHAgS^j_chzSnns*SUV@exCbz?)!JnKhJ}ra`&)7*ilsO%P=lwnmKKo
z55fT{rg8^EsoWHh_CZl$D*sc0NkXYGF_0Dlj{uD4KPp~s2wO1~x{snl|3pc`xc^Io
z=KN63S>@<Y1f=aPHa3o7C>1)PlQAou6wl*9tsqyFhD9#^#NEx{Nk<87CHk`_Z{6N{
zG;~de*X6=sltygH>1Ro^SIP3slkm{j`4|!G-OrVIndbI^0heAh45m<O^LOWE<#{XF
zrXg8hDNgqfh+hv9xx4y?HfC$5ov3>3$#`8y|MGLk>*uN~()%YjMtByOs%<-BS+XoI
zNm(I#UVr}wGn3Z-*P3aN^?~k8N@(f?iQ~DWZ?4sWHxjEM7)Jh~9?TDUmo3g;0?6Wy
zQ_dtKr|^tCZfX9OwRU%z8Ti&pk+6fimTvCJ*pj+%V~@fbj#ZWEHzoB!PmV<_GV=U;
zal=O!CLh|lGZ)6Uywqvz=Ou&BuZvu^lK+`1av%=A<@c+A1@L}4E3PHvyVr{5Yg%EL
zv{W>{DbrkoOWm|v(8HH_>d;4<<lffdFC~tsA=-C>R^OKc?5d6n@e7K}xv%6Nd<o<F
zkw%D!wl<i1s#6%tXKNHc6u@fXr!LcmHqM#&ssw(1KQfR;bWzRF2#et#8NIaRky+0~
zY91MN{WuL3nss#Pj!nLLN<{|Ic6?bGQWSeu_zdyq-XLcPT!E2<6|J{=^5@5ToVK2O
z-XzB||5>*)GS}SY;RI_6=4T9{;bYT4d-K|b_7L<^9ofie{zV$OU`Ajcp}gOs#7{IK
zV*JX&C)cjsaWxoG$WP$I4B#FYsn`~z3pw@yWzTR5+t)tG9qQj>z5ZfTg%S1G-^yDM
z_O7+F2-KNyJCayWtg^5v7$MU(JIBwAow;a*Uhz?g6QMu-uB%Zlp34Xp)0h_>ZIH$H
zq)LAw>+?91zx0+$tt#Hvw20;nkEBbCjK<xV7GX=+`uW=SC(TJwEVvP8A>43oI}oGo
z*Aiw`h)DeWE51{Lv#gE#+&#Z(Hv(>)7G$(I`!=QGBD_8C)KaR4P5U^#qk4Jfz9dPw
z8GF~JpxF{pG6$roFtLKUJv?8?@S%thH-z;c*28)aow@PzqKli)aD=Vm`~98m4f)nV
z$U-UJ#;)q&j%1M(>)}@)wJIuFS7IBzS*7;99P)F!BfdAe>;ecr`H#a5hXdAN4bPgd
zFSN^e2Y0i_(241PAiXVLe_`zptLxJ!gNE|GMJHdzX+*tqsg8x{2?lQS+M(zf08$p6
zDxb6R$Sg_kNNGwmW&NFv8GrSf!4}@B6xsVq%fZE(zLQ3p^Yb~>#Mn?@{8v5hmZ#wj
z`?5u#<Tyq=C40RvdsOm{;M32#tH)rY0;w7{rxEbbiNn+Pom0&5`-*QW$MQN=?ayr^
zzTJOb^iI~6kiyFC2_#Q(F86S*b15K_#oB4hZB25cofgW`NhTEE({1IMk775`Url=$
z%4Tvc=%^Qo@&b;Y{_2L?m2jC?ssq(I69tM80sTZ|1*863kquFKb?>d%VSJmCjCvN7
zC0sl8VkI^-Zu9aU4~w*^uYj(UQ+PY7&=lJ9F`LR0U0fqTP!e6+Of0KaUyfl^y1t0d
zaKX;x^=<S|Bp8Ww-jiJ{zZ<unw0l9z2uVnP%F<iSqIA~{8Q#k7D{<2A_ql_=zb6<G
ze!Huw#}9Z?=|o(O{*{P5>b3WTlH%2#xLR_v>2_3@CG&AJPmi~ldc3=}k>|X;wp2vD
zv+<bLl4fa>%oVM}R_M$7C_WgM3Jd~;P>&yELjx$mzo#dcFd7DhLI40jx&A{6p>3sY
zfKb2_Py<c?nt(R=pn&s$2XGu@j)6$}E7AlmfK@M$BY~_Y*sBI+o*-ht9uEKwXn{%+
z_$Hwu|M>(6+E3aCum&!Imcc*(5CR@A@H$z*6rccPP(T4Io}jrba0WOF7=rkl`<)wt
zJ!e5Q29=ROAgBreyup|R#^k>oWdYm2T*JZa0_YM9j{oC-{~HGk+z3h_rN9OOK#=;U
z0{Q<Pfe^Gi$Xt8E|9eLyP}!MW3v+KC9PHR+5L@}b-$0GVltDVOyUX!qY*AOetz_hO
z`wZJ9R?Nl3GjMLCwHddZ9b|H|_`LudvW=w>X^`1wXCAd!oShR8YoNCAwNT}tHx5}`
zX6$OPb4FzM`C5#+xsSv=<)^F4ToIehq`utlY_jaH*l<K(eCLS-t|LXrS6I{5{d<Mg
zCrPbx5WddjK1G=LM9{yqPlvb}N*puX?mRg%q$}PKZ0}ja5k1^^tkrt@^ajShK*3qU
z(IT__JoD5rr5(A`f5`!U8)!2RU6=5ax)uMbw~;|q+I+avn*1lUcf!iSOH<fJ(W7jB
zT8LAgpa_rq{^`f+Al*Hy2t(%|pT%6S0ZIZ%pRu-H1HM~mrx0DVzz<#@QBDC>4q2xV
znH$kNp>_;3e0uoXetQ0OpB(m!edExHrlXd9mZ%Qj$L{bsL%jQz^eOijD~H$F3s^e4
z9^Ey@6^zd_4<F@qXw(l@Xw|7siVUiS-6;0m?(&<f#C^;y2J#fRktYleTFE*@67R8l
zk9_*!?L>3kJs!Lnsl=!%UgdgsMN+L56?0KtKBxD{1s4Yq(hPrOk(tt>U+j=8V*n4Q
z7gWU<m<uW#y8iaEZyx2Bwz13d`_zl`lpkG#nO~ckR)>NdRNb<xEW$p@7#wBS#3^Ef
zN^TD~2$-2v+R^%?ZqCO&+&|mv7{XaR)?{4cJG&)?J+@cZzjkOGz1Ni(S#p?iFa@*u
zM`za^|K=s7sc~9nf)xJ-Q@50}(E^{wxy`H?rYlWJizBv8C#~&5AeWpnXIcU2C_$mu
zF1xxdR`W;kWX1rse!*X7s@&^oQq1P6u;WvDDB*R1QA6ta+S`iR>{MUKkp6tlC&?+K
z7FW$!i*;S?Sf{43E>S<on{J7aer|bFj}UPo-uO-Z*AMR4Ec<s;Z<Ug&MSJ&Dug+-N
zwu!Q~_qwc>5}M}E*@|K&YrEjxYH0>N&XuBOr})HdfCqc<<jm~Y4ZfN2jT+q&|CcRV
zoIT0gudWKIooh|4?Fe!v9&P&qod`iE1_vkSKfHp*X%)OIG%2s1jbP8#&Pp{5_^!0h
zGWh21*rnt`_>OyFXi|;}mPZUTuVKwCR)5rbOQ2uIKz1ZLGswVx-T~{VcZC)25v9bb
z^}X>+XTl0hlp@-ql6kAlKDZRfLy&5>r>{vS&~K5<uZ-i7^u(lo&eyfhNv$zCWt?uT
z$z0pHMm{$n-KB;}lZI2fPKWh;9#(_T`p)CA;@x+ovl3cL_vliQT4RF89mp9+Qi@!O
zLmIjt*!AMJO;0??;+d(WOQwD}u_ObtGh0wKrL&m^HTT)bJ|K;v^iVP=4%h(|es(qq
zsL(r9lNeSmGbKm(tJg_)tbytg{Vb@^)KznvI70MhyML98S`bU^RB^`P-vi^{UK7jt

literal 0
HcmV?d00001

diff --git a/installSSL.ps1 b/installSSL.ps1
index 076f62a..f0ecec9 100644
--- a/installSSL.ps1
+++ b/installSSL.ps1
@@ -1,31 +1,94 @@
-# ==========================================
-# 📥 ШАГ 1: Установка сертификата в систему
-# ==========================================
-# Путь к файлу PFX
-$PfxPath = "C:\edo\Help-D_RDP.pfx"
-$PfxPassword = "sj032ssa"
+# ============================================================
+# Skript ustanovki sertifikata dlya RDP signing
+# Zapusk: irm https://git.help-d.ru/helmut/ssl.git/raw/branch/main/installSSL.ps1 | iex
+# ============================================================
 
-Write-Host "⏳ Импорт сертификата..." -ForegroundColor Cyan
+# ========== НАСТРОЙКИ (править при размещении на своём Gitea) ==========
+$GiteaUrl = "https://git.help-d.ru"                          # Адрес твоего Gitea
+$RepoPath = "helmut/ssl.git//raw/branch/main"             # Путь к raw-файлам
+$CertFileName = "Help-D_RDP.pfx"                             # Имя PFX-файла в репо
+$CertPassword = "sj032ssa"                                   # Пароль от PFX
+$CertStorePath = "C:\tmp\cert"                               # Папка для временного хранения
+$ThumbprintFile = "$CertStorePath\thumbprint.txt"            # Куда сохранить отпечаток
+# ======================================================================
+
+# Проверка прав администратора
+if (-NOT ([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) {
+    Write-Error "❌ Запустите PowerShell от имени Администратора"
+    exit 1
+}
+
+# 1. Подготовка папки
+Write-Host "`n[1/4] Preparing folder..." -ForegroundColor Cyan
+if (-not (Test-Path $CertStorePath)) {
+    New-Item -ItemType Directory -Path $CertStorePath -Force | Out-Null
+    Write-Host "        Created: $CertStorePath" -ForegroundColor Gray
+}
+
+# 2. Скачивание сертификата
+Write-Host "[2/4] Downloading certificate..." -ForegroundColor Cyan
+$CertUrl = "$GiteaUrl/$RepoPath/$CertFileName"
+$CertPath = "$CertStorePath\$CertFileName"
 
 try {
-    $SecurePass = ConvertTo-SecureString -String $PfxPassword -AsPlainText -Force
-
-    # 1. Доверенные корневые центры (Доверие цепочке)
-    Import-PfxCertificate -FilePath $PfxPath -CertStoreLocation Cert:\LocalMachine\Root -Password $SecurePass | Out-Null
-    
-    # 2. Доверенные издатели (Убирает предупреждение "Неизвестный издатель")
-    Import-PfxCertificate -FilePath $PfxPath -CertStoreLocation Cert:\LocalMachine\TrustedPublisher -Password $SecurePass | Out-Null
-    
-    # 3. Личное хранилище (Доступ к приватному ключу для подписи)
-    $Cert = Import-PfxCertificate -FilePath $PfxPath -CertStoreLocation Cert:\LocalMachine\My -Password $SecurePass -Exportable
-
-    $Thumb = $Cert.Thumbprint
-    
-    Write-Host "✅ Сертификат успешно установлен." -ForegroundColor Green
-    Write-Host "📋 Скопируйте этот отпечаток для Шага 2:" -ForegroundColor Yellow
-    Write-Host "------------------------------------------------"
-    Write-Host "$Thumb" -ForegroundColor White -BackgroundColor DarkBlue
-    Write-Host "------------------------------------------------"
+    Invoke-WebRequest -Uri $CertUrl -OutFile $CertPath -ErrorAction Stop -UseBasicParsing
+    Write-Host "        Downloaded: $CertFileName" -ForegroundColor Green
 } catch {
-    Write-Error "❌ Ошибка установки: $_"
-}
\ No newline at end of file
+    Write-Error "❌ Failed to download certificate from $CertUrl`n   Error: $_"
+    exit 1
+}
+
+# 3. Установка в хранилища
+Write-Host "[3/4] Installing certificate..." -ForegroundColor Cyan
+$SecurePass = ConvertTo-SecureString -String $CertPassword -AsPlainText -Force
+
+try {
+    # Импорт в личное хранилище (приватный ключ для подписи)
+    $Cert = Import-PfxCertificate -FilePath $CertPath -CertStoreLocation Cert:\LocalMachine\My -Password $SecurePass -Exportable
+    $Thumb = $Cert.Thumbprint
+
+    # Импорт в доверенные корневые центры
+    Import-PfxCertificate -FilePath $CertPath -CertStoreLocation Cert:\LocalMachine\Root -Password $SecurePass | Out-Null
+
+    # Импорт в доверенные издатели (обязательно для RDP)
+    Import-PfxCertificate -FilePath $CertPath -CertStoreLocation Cert:\LocalMachine\TrustedPublisher -Password $SecurePass | Out-Null
+
+    Write-Host "        Certificate installed to:" -ForegroundColor Green
+    Write-Host "          • LocalMachine\My" -ForegroundColor Gray
+    Write-Host "          • LocalMachine\Root" -ForegroundColor Gray
+    Write-Host "          • LocalMachine\TrustedPublisher" -ForegroundColor Gray
+
+} catch {
+    # Если сертификат уже установлен — берём его из хранилища
+    if ($_.Exception.Message -match "already exists") {
+        $Cert = Get-ChildItem Cert:\LocalMachine\My | Where-Object { $_.Subject -like "*Help-D*" } | Select-Object -First 1
+        $Thumb = $Cert.Thumbprint
+        Write-Host "        Certificate already installed. Using existing." -ForegroundColor Yellow
+    } else {
+        Write-Error "❌ Installation error: $_"
+        exit 1
+    }
+}
+
+# 4. Сохранение отпечатка и вывод результата
+Write-Host "[4/4] Saving thumbprint..." -ForegroundColor Cyan
+$Thumb | Out-File -FilePath $ThumbprintFile -Encoding ASCII -Force
+Write-Host "        Saved to: $ThumbprintFile" -ForegroundColor Gray
+
+# ============================================
+# РЕЗУЛЬТАТ
+# ============================================
+Write-Host "`n==========================================" -ForegroundColor Green
+Write-Host "   CERTIFICATE INSTALLATION COMPLETE" -ForegroundColor Green
+Write-Host "==========================================" -ForegroundColor Green
+Write-Host "`nThumbprint (для подписи RDP):" -ForegroundColor Yellow
+Write-Host "------------------------------------------------"
+Write-Host "$Thumb" -ForegroundColor White -BackgroundColor DarkBlue
+Write-Host "------------------------------------------------"
+Write-Host "`nТеперь можно запускать скрипт подписи:" -ForegroundColor Cyan
+Write-Host "  irm https://git.help-d.ru/.../sign-rdp.ps1 | iex" -ForegroundColor Gray
+Write-Host ""
+
+# Очистка: удаляем PFX, оставляем только отпечаток
+Remove-Item $CertPath -Force -ErrorAction SilentlyContinue
+Write-Host "🗑️  PFX-файл удалён из $CertStorePath (остался только отпечаток)" -ForegroundColor Gray
\ No newline at end of file