Feature: Allow xWebService to select Certificate to use for SSL via Subject Name

[PlagueHO]

This would allow configurations to be created that would use the xCertificate/xCertReq DSC resource to request the certificate to use from a CA and then the DSC Pull Server could locate and consume the certificate.

At the moment there has to be a semi manual process for getting the certificate onto the DSC Pull Server and assigning the thumbprint.

This would require making the CertificateThumbPrint parameter optional and adding a certificate subject parameter.

This would allow the following configuration (:

Import-DSCResource -ModuleName xPSDesiredStateConfiguration
Import-DSCResource -ModuleName xCertificate

Node $NodeName
{
     WindowsFeature DSCServiceFeature 
     { 
         Ensure = 'Present'
         Name   = 'DSC-Service'             
     } 

    xCertReq DSCSSLCert
    {
        CARootName                = 'ca01-contoso-ca'
        CAServerFQDN              = 'ca01.contoso.com'
        Subject                   = 'dsc.contso.com'
        AutoRenew                 = $true
        Credential                = $Credential
        DependsOn               = '[WindowsFeature]DSCServiceFeature'
    }

     xDscWebService PSDSCPullServer 
     { 
         Ensure                  = 'Present' 
         EndpointName            = 'PSDSCPullServer' 
         Port                    = 8080 
         PhysicalPath            = "$env:SystemDrive\inetpub\PSDSCPullServer" 
         CertificateSubject   = "dsc.contso.com"
         ModulePath              = "$env:PROGRAMFILES\WindowsPowerShell\DscService\Modules" 
         ConfigurationPath       = "$env:PROGRAMFILES\WindowsPowerShell\DscService\Configuration" 
         State                   = 'Started'
         DependsOn               = '[xCertReq]DSCSSLCert'                         
     } 
}

[rcarpenter79]

Is this still wanted?

I recently ran in to this problem and added this feature for my own use.
I found this issue after I had started my change.

[johlju]

@rcarpenter79 Are you interested to send in a pull request with your change?