1.3 and fix TLS-classification regex (#961, #962) #33

Merged

amiryahaya merged 1 commit from fix/961-962-airgap-reference-copy into main

2026-09-23 14:47:03 +02:00

amiryahaya commented

2026-09-23 14:45:18 +02:00

Owner

Byte-identical copy of the fix applied to the triton repo's
pkg/manageserver/ca/assets/get-airgap.ps1 (the real, go:embed'd,
genuinely-served air-gapped installer asset — see triton#1127). This
repo's agent/get-airgap.ps1 is a read-only reference copy per
CLAUDE.md, not the served artifact, but kept in sync here for
documentation accuracy.

Fixes applied

#961: both AuthenticateAsClient($RemoteHost) call sites
switched to the 4-argument overload with an explicit Tls12 | Tls13
floor.
#962: the TLS-failure classification regex narrowed to the
actual, verified SslStream managed-layer rejection message,
dropping the bare 'CA' alternative that matched
"AuthenticateAsClient" itself.

$SCRIPT_VERSION bumped 1.0.1 → 1.0.2.

Testing

Verified byte-identical to the triton repo's already-tested,
already-fixed asset after copying. PowerShell AST parse clean;
PSScriptAnalyzer shows no new findings in the touched region.

🤖 Generated with Claude Code

Byte-identical copy of the fix applied to the triton repo's `pkg/manageserver/ca/assets/get-airgap.ps1` (the real, `go:embed`'d, genuinely-served air-gapped installer asset — see triton#1127). This repo's `agent/get-airgap.ps1` is a **read-only reference copy** per CLAUDE.md, not the served artifact, but kept in sync here for documentation accuracy. ## Fixes applied - **#961**: both `AuthenticateAsClient($RemoteHost)` call sites switched to the 4-argument overload with an explicit `Tls12 | Tls13` floor. - **#962**: the TLS-failure classification regex narrowed to the actual, verified `SslStream` managed-layer rejection message, dropping the bare `'CA'` alternative that matched `"AuthenticateAsClient"` itself. `$SCRIPT_VERSION` bumped 1.0.1 → 1.0.2. ## Testing Verified byte-identical to the triton repo's already-tested, already-fixed asset after copying. PowerShell AST parse clean; `PSScriptAnalyzer` shows no new findings in the touched region. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

amiryahaya added 1 commit

2026-09-23 14:45:18 +02:00

fix(agent/get-airgap.ps1): pin TLS 1.2/1.3 and fix TLS-classification regex (#961 , #962 ) 70560bb2c5

Byte-identical copy of the fix already applied to the triton repo's
pkg/manageserver/ca/assets/get-airgap.ps1 (the real, go:embed'd,
genuinely-served air-gapped installer asset -- see triton#1127).
This repo's copy is a read-only reference copy per CLAUDE.md, not the
served artifact, but kept in sync for documentation accuracy.

- #961: both AuthenticateAsClient($RemoteHost) call sites switched to
  the 4-argument overload with an explicit Tls12|Tls13 floor.
- #962: the TLS-failure classification regex narrowed to the actual,
  verified SslStream managed-layer rejection message, dropping the
  bare 'CA' alternative that matched "AuthenticateAsClient" itself.

$SCRIPT_VERSION bumped 1.0.1 -> 1.0.2. Verified byte-identical to the
triton repo's fixed asset after copying.

amiryahaya merged commit 284379efda into main

2026-09-23 14:47:03 +02:00

amiryahaya referenced this pull request from a commit

2026-09-23 14:47:04 +02:00

Merge pull request 'fix(agent/get-airgap.ps1): pin TLS 1.2/1.3 and fix TLS-classification regex (#961, #962)' (#33) from fix/961-962-airgap-reference-copy into main