powershell.zoneThe Powershell Zone – a blog by Daniel Sörlöv

The Powershell Zone a blog by Daniel Sörlöv Menu Home About Online Tools Client Headers FFWD.Link IPNummer.se Legitimera Online Ping remote host Plausible Identity Software Freja eID and BankID Sorlov.OrchestratorActivities Sorlov.PowerShell Sorlov.UserExec Home Assistant Search for: The blog thing.. 26 February, 2022 / Daniel Sörlöv I haven’t had a lot of energy for my blog in the last couple of years. But I do still exist and you are able to follow my adventures via mainly GitHub or Linkedin. I will try to start and update this site but don’t get your hopes up.. I have updated all links to my project and stuff like that today at least! =) Signing files automatically using hardware token in Linux 21 May, 2020 / Daniel Sörlöv I am currently doing some stuff for automatic signing of files for a friend of mine on a Linux machine (Ubuntu 19.10). Scary stuff. I know. The scenario is that the signing key is used in a script or similar in a controlled enviroment for some signing operations that are automated but using a certificate that is secured on a physical token such as the Safenet eToken 5100 or similar javabased keys. The end goal is to automate document signing for PDF. It took alot of research and looking around before I could get if it was even possible. And it was actually pretty simple once I got the right drivers. Now, once I got it to work here the next step is to migrate it all to Windows and a PowerShell script but that is the next challenge.. =) This is mostly done to make sure I can develop something cross-platform for PowerShell but before you can walk you need to crawl. So here is some pointers if some fool tries the same mission as I….. =) First start by downloading the Safenet eToken 5100 token drivers . Use the CORE drivers from withoutGUI folder. Then install prereqs: sudo apt install openssl sudo apt install libssl-dev sudo apt install safenetauthenticationclient-core_10.7.77_amd64.deb sudo apt install libengine-pkcs11-openssl sudo apt install opensc After this plug in your token. It should light blue and stay blue when it is active. If the light goes out after a few seconds to a minute you need to do this: sudo /usr/sbin/pcscd foreground auto-exit apdu Next step is to iterate the key and see the id of your signing key and any other certs in there (the trust chain certs”): pkcs11-tool module /lib/libeToken.so list-objects Then I had to export all the certs, and then take all the other” certs and concat them together to make a single file with the trust chain in it. pkcs11-tool module libeToken.so read-object type cert id certid | openssl x509 -inform DER -outform PEM -out cert.pem cat cert1.pem cert2.pemchain.pem Next step is to prepare the OpenSSL engine for use with this type and how to handle the key. The config file /etc/ssl/openssl.cnf was modified and the following content added: #This line needs to be added in the "default" area, i.e. before any section openssl_conf = openssl_def [openssl_def] engines = engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 #Make sure theese still works dynamic_path = /usr/lib/x86_64-linux-gnu/engines-1.1/libpkcs11.so MODULE_PATH = /lib/libeToken.so # PIN for yor token! PIN = 123456 And now comes the magic; testing signing using openssl: openssl smime -md sha256 -binary -outform SMIME -sign -certfile chain.pem -signer public.pem -inkey slot_slotid-id_certid -keyform engine -in inputfile -out outputfile -engine pkcs11 -passin pass:pincode PHP Library for Freja eID 10 May, 2020 / Daniel Sörlöv During the Covid-19 pandemic I have been working hard with supporting many customers at work around identity and security. Working secure from home have become the new standard. For this purpose I started to collaborating with Verisec around their identity solution Freja eID. Numerous customers have been onboarded in their system and it work really, really, simple and gives me great authentication. So simple, and so great, that I have started to implement it for most of my private applications also. I wrote a small wrapper for it to make sure I can reuse it alot. Hopefully this code can be of use for you also. See the code at GitHub . Legitimera Online 7 May, 2020 / Daniel Sörlöv Today I officially released my site Legitimera Online (http://legitmera.online) for usage. It’s a free service, with to be honest quite limited use, but a fun experiment and a platform for my other sites to use for authentication etc. It uses Freja eID as a login provider to provide secure identities verification, simple agreement signing and also secured identities when using Teams for external people. Read more on my project page. The awakening (again!) 29 August, 2018 / Daniel Sörlöv Finally! After a few years in the dark, offline and without the time or energy to migrate my crashed blog I have now finally done it! Kind of restored my backups that is.. The blog itself is up, most of what I could find in my backups are also migrated, most of my old posts are also imported, but still missing a few years and lots of Graphics, broken links and so on. Also, some years I decided to do blogging in Swedish so will be a bit confusing when you read them because I have just auto-translated them. Using different plattforms have not exacly made my life easier when it gets to migration from all the scattered backups, but atleast its now happening anyways. Will be updating some old sourcecode also as we go along and bring that online again, most of it is pretty old now but I will have the most requested projects up. How much is Office 365 used? 13 October, 2016 / Daniel Sörlöv If you have an Office 365 agreement and wonder what and how much you use, it’s possible to check out using the long-awaited Office 365 content package that has now been published. The package shows how many different services are used, how many messages are posted on social functions, but there are limited places in this pilot and you must apply by email. Read more at https://blogs.office.com/2016/10/10/announcing-the-preview-of-the-office-365-adoption-content-pack-in-power-bi/ Azure Information Protection is now GA 9 October, 2016 / Daniel Sörlöv Information wants to be free” is the stroke of many bad people out there, but completely untrue it is not. Or, at least, it’s not the idea that information wants to be mobile. A tough difference. For this I have always propagated RMS (Rights Management Services) as protection. It protects the document itself, no matter where it is. It is a cornerstone of information security – that we can actually protect. The problem with RMS has long been just how to attack to actually classify, set permissions and crash work with RMS. It has been more or less insurmountable. Now, Microsoft has taken a leap and released AIP, which includes our former hero RMS, but also the new fighter we received when Microsoft bought the Secure Islands. AIP is about how we classify, follow up, and enable sharing of information. Certainly not an Office 365 product without an Azure product, but it solves so many problems we’ve had on the productivity page so it’s impossible to talk about it. It builds on and above all, the new way of working is amazingly amazing. Read more at https://blogs.technet.microsoft.com/enterprisemobility/2016/10/04/azure-information-protection-is-now-generally-available/ Yammer is a part of Groups! 7 October, 2016 / Daniel Sörlöv In the department of some older news, I would like to remind you of an incredibly important news that really shows Microsoft’s investments on Yammer as a platform. So for those who believe that Yammer has taken their last breath, or is heading for safe death, believe wrong. We have one of the greatest possible development plans in our history of Yammer, and it’s a social network for companies that actually develop and adapt to new modern tools and working methods. Soon, we can now use all SharePoints strengths when we handle files in Yammer, that is, version...