Export-VenafiCertificate doesn't support IncludePrivateKey with JKS format

[harrisonmeister]

Summary

The Export-VenafiCertificate function doesn't support IncludePrivateKey with the JKS format.

Environment

Windows

Operating System: 10.0.14393.0
VenafiTppPS version: 3.1.5
PowerShell version:  5.1.14393.3866 (Desktop)

Linux

Operating System: Linux 5.11.0-27-generic #29~20.04.1-Ubuntu SMP Wed Aug 11 15:58:17 UTC 2021
VenafiTppPS version: 3.1.5
PowerShell version:  7.1.4 (Core)

Steps to reproduce

On TPP (not VaaS), attempt to export a certificate with the following call:

$Certificate = Export-VenafiCertificate -Format "JKS" -CertificateId "Path\To\Your\Certificate" -FriendlyName "MyFriendlyName" -IncludePrivateKey -KeystorePassword $SecureKeyPass

Expected behavior

The docs state for IncludePrivateKey:

When the Format is Base64 (PKCS #8), PKCS #12, or JKS, you can specify whether to return the private key

I expect to receive a certificate response with the certificate in JKS format, including the private key.

Actual behavior

An error is received:

Parameter set cannot be resolved using the specified named parameters. One or more parameters issued cannot be used together or an insufficient number of parameters were provided.

I think part of the issue that the $IncludePrivateKey property doesn't have the TppJks parameter set included here

Adding the parameter set is fine:

[Parameter(ParameterSetName = 'Tpp')]
[Parameter(ParameterSetName = 'TppJks')]
[switch] $IncludePrivateKey,

However in a trace when testing, to provide the IncludePrivateKey property in the request body, you have to specify the field Password and KeyStorePassword if you want the exported certificate to be in the JKS format:

In the above screenshot, Request 27 included the chain, but not the IncludePrivateKey property:

{
    "KeystorePassword":  "YOURPASSWORD",
    "CertificateDN":  "\\PATH\\Tp\\Certificate",
    "Format":  "JKS",
    "FriendlyName":  "MyFriendlyName",
    "IncludeChain":  true
}

In Request 36, you'll notice the body size increased from 3,270 to 6,230. The request for that included both the Password and IncludePrivateKey property:

{
    "Password":  "YOURPASSWORD",
    "KeystorePassword":  "YOURPASSWORD",
    "CertificateDN":  "\\PATH\\Tp\\Certificate",
    "Format":  "JKS",
    "FriendlyName":  "MyFriendlyName",
    "IncludeChain":  true,
    "IncludePrivateKey":  true
}

Screenshots