Cannot install 1Pwd module: Install-Package: The module '1Pwd' cannot be installed or updated because the authenticode signature of the file '1Pwd.psd1' is not valid. - expired certificate

Question

Cannot install 1Pwd module: Install-Package: The module '1Pwd' cannot be installed or updated because the authenticode signature of the file '1Pwd.psd1' is not valid. - expired certificate

Closed this issue a year ago · 6 comments

Repro:
Install-Module 1Pwd

Error result:
Install-Package: The module '1Pwd' cannot be installed or updated because the authenticode signature of the file '1Pwd.psd1' is not valid.

Get-OpenAuthenticodeSignature returns: Certificate trust could not be established. The first reported error is: certificate has expired

Furthermore, Get-OpenAuthenticodeSignature /1pwd/1Pwd.psd1 -SkipCertificateCheck | Select * shows an expiration (Not After) 2023-06-19 (2 days ago)

Answer 1 · 2023-06-21T23:07:26.000Z

It's worth noting that a workaround is to do Install-Module 1Pwd -SkipPublisherCheck but ideally the certificate should be renewed :)

Answer 2 · 2023-06-22T00:39:26.000Z

Whilst the signing certificate that was used has expired (not been revoked) the signature is still correct. https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_signing?view=powershell-7.3#prevent-the-signature-from-expiring It looks like the timestamp server I used no longer exists. 😡 FYI http://timestamp.verisign.com/scripts/timstamp.dll

…

On Thu, 22 Jun 2023 at 09:07, John G Hohengarten ***@***.***> wrote: It's worth noting that a workaround is to do Install-Module 1Pwd -SkipPublisherCheck but ideally the certificate should be renewed :) — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAC55XJVN7J2C6AWFNHXWCTXMN5DRANCNFSM6AAAAAAZPM3FSU> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

Answer 3 · 2023-06-22T02:39:00.000Z

@wsuhoey can you try with the updated commit above.

Answer 4 · 2023-06-22T15:44:58.000Z

Admittedly, I'm not sure how to test the commit via Install-Module without using the PSGallery. :(

Answer 5 · 2023-07-03T01:21:00.000Z

v2 is published to the PowerShell Gallery now. It supports CLI 2 as well as CLI 1.
It is both signed with a current cert and using a timestamp server that is available for when the cert expires.
More details here. https://darrenjrobinson.hashnode.dev/powershell-automation-for-1password

Answer 6 · 2023-07-03T15:41:08.000Z

Confirmed the issue no longer happens with v2.0.0 on PSGallery. Thank you!