BUG in SSL certificates assignment to bindings

[konste]

Repro:

$BindingInfo = @(
    New-CimInstance -ClassName MSFT_xWebBindingInformation -Namespace root/microsoft/Windows/DesiredStateConfiguration -Property @{
        Protocol              = 'https'
        IPAddress             = '*'
        Port                  = 443
        HostName              = 'api.bittitan.com'
        CertificateThumbprint = '34AE59F4CFA28602716C46D172850747B36624D8'
        CertificateStoreName  = 'WebHosting'
        SslFlags              = 1
    } -ClientOnly
    New-CimInstance -ClassName MSFT_xWebBindingInformation -Namespace root/microsoft/Windows/DesiredStateConfiguration -Property @{
        Protocol              = 'https'
        IPAddress             = '*'
        Port                  = 443
        HostName              = '*.migrationwiz.com'
        CertificateThumbprint = 'DE0A409C2F2BF8DF47C9154EDE3C3309CAB9E0F7'
        CertificateStoreName  = 'WebHosting'
        SslFlags              = 1
    } -ClientOnly
)

Update-WebsiteBinding -Name MigrationWiz -BindingInfo $BindingInfo

Despite different CertificateThumbprint specified for the first and second binding BOTH get the same (first) certificate assigned!

[konste]

I have found the bug. Would it help if I work on PR? I have noticed very little activity on that project and don't want to waste time if it is not needed.

[rsawer]

I have the same issue here, seems that it appeared after version 1.17.0.0 or I've missed that somehow

[konste]

@remcoeissing Any chances to see recent fixes released soon?

[Davidsod]

I'm having the same problem (#346) as mentioned here, REALLY appreciate if this will be fixed soon :)

[johlju]

Not sure there are a PR for this? I label this as help wanted so that someone in the community can run with it.

[konste]

I plan to work on it today and hopefully have a PR soon. I’m also tired of working around this issue every time.

[johlju]

@konste awesome! Then I label this as in progress, let me know if that changes (you get other prioritize) .

[konste]

@johlju , @Davidsod , PR created: #347

One test is failing, but it is not caused by my change. It is separate issue #302

[Davidsod]

@konste , Just patched my servers and it works like MAGIC! really appreciate it!

[Davidsod]

Obviously, it would be nice to have this fixed through xWebAdministration package of course :)

[typozh]

We need this to be fixed! We can't use the new xIisFeatureDelegation resource in version 2.0.0.0 as this breaks our website bindings! Any idea when this will be available in a new version?
Thanks!

[johlju]

PR #347 is abandoned (no activity for over two weeks since it opened), so currently no one in the community is working on this. Anyone may pick up the abandoned PR and continue the work.