PowerShell的执行makecert与变量赋予太多的参数错误

Question

下面的命令在PowerShell中的工作：

$currentDirectory = Split-Path $Script:MyInvocation.MyCommand.Path 
& "$currentDirectory\Makecert\makecert.exe" –sv actualCnName.pvk -n "cn=actualCnName" actualCnName.cer -r -eku 1.3.6.1.5.5.7.3.1 

但我想这些参数，并使用变量名$ pvkName，$ cnName和$ cerName。执行时的错误：

$cnName = "actualCnName" 
$pvkName = $cnName + ".pvk" 
$cerName = $cnName + ".cer" 
$pfxName = $cnName + ".pfx" 

& "$currentDirectory\Makecert\makecert.exe" –sv $pvkName -n "cn=$cnName" $cerName -r -eku 1.3.6.1.5.5.7.3.1 

是

[DBG]: PS C:\WINDOWS\system32>> 
Error: Too many parameters 
Usage: MakeCert [ basic|extended options] [outputCertificateFile] 
Basic Options 
-sk <keyName>  Subject's key container name; To be created if not present 
-pe     Mark generated private key as exportable 
-ss <store>  Subject's certificate store name that stores the output 
        certificate 
-sr <location>  Subject's certificate store location. 
         <CurrentUser|LocalMachine>. Default to 'CurrentUser' 
-# <number>  Serial Number from 1 to 2^31-1. Default to be unique 
-$ <authority> The signing authority of the certificate 
         <individual|commercial> 
-n <X509name>  Certificate subject X500 name (eg: CN=Fred Dews) 
-?     Return a list of basic options 
-!     Return a list of extended options 
[DBG]: PS C:\WINDOWS\system32>> 

想知道如何解决这个错误。

Answer 1

下面是我用它来打电话与评论用法和参数本地EXE方式的一例：

# Gen-CACert.ps1 
clear-host 

$scriptBlock = {.\Makecert -n `"CN=PowerShell Authorite de certification`" <# Sujet du certificat (conforme à la norme X50 #>` 
          -a sha1           <# Algorithme utilisé #>` 
          -eku 1.3.6.1.5.5.7.3.3       <# Option du certificat (signature de code) #>` 
          -r            <# Certificat auto signé #>` 
          <# -ss `"$($args[0])`"        Dossier de stockage du certificat #>` 
          -ss `"root`"          <# Dossier de stockage du certificat #>` 
          -sr localMachine         <# Magasin de stockage localmachine ou currentuser (defaut) #>` 
          -sv `"$($args[0]).pvk`"       <# Nom du fichier contenant la clef privée #>` 
          `"$($args[0]).cer`"}        <# Nom du fichier certificat #> 

$PoshCARoot = "PoshCARoot" 
Invoke-Command -ScriptBlock $scriptBlock -ArgumentList $PoshCARoot