Src/Private/Get-AbrADCACRLSetting.ps1

function Get-AbrADCACRLSetting {
    <#
    .SYNOPSIS
    Used by As Built Report to retrieve Microsoft Active Directory CA CRL Distribution Point information.
    .DESCRIPTION
 
    .NOTES
        Version: 0.8.1
        Author: Jonathan Colon
        Twitter: @jcolonfzenpr
        Github: rebelinux
    .EXAMPLE
 
    .LINK
 
    #>

    [CmdletBinding()]
    param (
        [Parameter (
            Position = 0,
            Mandatory)]
        $CA
    )

    begin {
        Write-PScriboMessage "Collecting AD Certification Authority Certificate Revocation List information from $($CA.Name)."
    }

    process {
        try {
            Section -Style Heading3 "Certificate Revocation List (CRL)" {
                Paragraph "The following section provides the Certification Authority CRL Distribution Point information."
                BlankLine
                Section -Style Heading4 "CRL Validity Period" {
                    $OutObj = @()
                    try {
                        Write-PScriboMessage "Collecting AD CA CRL Validity Period information on $($CA.Name)."
                        $CRLs = Get-CRLValidityPeriod -CertificationAuthority $CA
                        foreach ($VP in $CRLs) {
                            try {
                                $inObj = [ordered] @{
                                    'CA Name' = $VP.Name
                                    'Base CRL' = $VP.BaseCRL
                                    'Base CRL Overlap' = $VP.BaseCRLOverlap
                                    'Delta CRL' = $VP.DeltaCRL
                                    'Delta CRL Overlap' = $VP.DeltaCRLOverlap
                                }
                                $OutObj += [pscustomobject]$inobj
                            } catch {
                                Write-PScriboMessage -IsWarning "CRL Validity Period $($VP.Name) Section: $($_.Exception.Message)"
                            }
                        }
                    } catch {
                        Write-PScriboMessage -IsWarning "CRL Validity Period Section: $($_.Exception.Message)"
                    }

                    $TableParams = @{
                        Name = "CRL Validity Preriod - $($ForestInfo.toUpper())"
                        List = $false
                        ColumnWidths = 40, 15, 15, 15, 15
                    }
                    if ($Report.ShowTableCaptions) {
                        $TableParams['Caption'] = "- $($TableParams.Name)"
                    }
                    $OutObj | Sort-Object -Property 'CA Name' | Table @TableParams
                }
                try {
                    Section -Style Heading4 "CRL Flags Settings" {
                        $OutObj = @()
                        try {
                            Write-PScriboMessage "Collecting AD CA CRL Distribution Point information on $($CA.Name)."
                            $CRLs = Get-CertificateRevocationListFlag -CertificationAuthority $CA
                            foreach ($Flag in $CRLs) {
                                try {
                                    $inObj = [ordered] @{
                                        'CA Name' = $Flag.Name
                                        'Server Name' = $Flag.ComputerName.ToString().ToUpper().Split(".")[0]
                                        'CRL Flags' = $Flag.CRLFlags
                                    }
                                    $OutObj += [pscustomobject]$inobj
                                } catch {
                                    Write-PScriboMessage -IsWarning "CRL Validity Period $($Flag.Name) Section: $($_.Exception.Message)"
                                }
                            }
                        } catch {
                            Write-PScriboMessage -IsWarning "CRL Validity Period Table Section: $($_.Exception.Message)"
                        }

                        $TableParams = @{
                            Name = "CRL Flags - $($ForestInfo.toUpper())"
                            List = $false
                            ColumnWidths = 40, 25, 35
                        }
                        if ($Report.ShowTableCaptions) {
                            $TableParams['Caption'] = "- $($TableParams.Name)"
                        }
                        $OutObj | Sort-Object -Property 'CA Name' | Table @TableParams
                    }
                } catch {
                    Write-PScriboMessage -IsWarning "CRL Validity Period Section: $($_.Exception.Message)"
                }
                try {
                    Section -Style Heading4 "CRL Distribution Point" {
                        Paragraph "The following section provides the Certification Authority CRL Distribution Point information."
                        BlankLine
                        try {
                            $OutObj = @()
                            Write-PScriboMessage "Collecting AD CA CRL Distribution Point information on $($CA.NAme)."
                            $CRL = Get-CRLDistributionPoint -CertificationAuthority $CA
                            foreach ($URI in $CRL.URI) {
                                try {
                                    $inObj = [ordered] @{
                                        'Reg URI' = $URI.RegURI
                                        'Config URI' = $URI.ConfigURI
                                        'Url Scheme' = $URI.UrlScheme
                                        'ProjectedURI' = $URI.ProjectedURI
                                        'Flags' = ConvertTo-EmptyToFiller ($URI.Flags -join ", ")
                                        'CRL Publish' = ConvertTo-TextYN $URI.IncludeToExtension
                                        'Delta CRL Publish' = ConvertTo-TextYN $URI.DeltaCRLPublish
                                        'Add To Cert CDP' = ConvertTo-TextYN $URI.AddToCertCDP
                                        'Add To Fresh est CRL' = ConvertTo-TextYN $URI.AddToFreshestCRL
                                        'Add To Crl cdp' = ConvertTo-TextYN $URI.AddToCrlcdp
                                    }
                                    $OutObj = [pscustomobject]$inobj

                                    $TableParams = @{
                                        Name = "CRL Distribution Point - $($CA.Name)"
                                        List = $true
                                        ColumnWidths = 40, 60
                                    }
                                    if ($Report.ShowTableCaptions) {
                                        $TableParams['Caption'] = "- $($TableParams.Name)"
                                    }
                                    $OutObj | Table @TableParams
                                } catch {
                                    Write-PScriboMessage -IsWarning $_.Exception.Message
                                }
                            }
                        } catch {
                            Write-PScriboMessage -IsWarning $_.Exception.Message
                        }
                    }
                } catch {
                    Write-PScriboMessage -IsWarning $_.Exception.Message
                }
            }
        } catch {
            Write-PScriboMessage -IsWarning "$($_.Exception.Message) (CRL Distribution Point)"
        }
        try {
            Section -Style Heading3 "AIA and CDP Health Status" {
                Paragraph "The following section is intended to perform Certification Authority health status checking by CA certificate chain status and validating all CRL Distribution Point (CDP) and Authority Information Access (AIA) URLs for each certificate in the chain."
                BlankLine
                $OutObj = @()
                try {
                    $CAHealth = Get-EnterprisePKIHealthStatus -CertificateAuthority $CA
                    foreach ($Health in $CAHealth) {
                        try {
                            Write-PScriboMessage "Collecting AIA and CDP Health Status from $($Health.Name)."
                            $inObj = [ordered] @{
                                'CA Name' = $Health.Name
                                'Childs' = ($Health.Childs).Name
                                'Health' = $Health.Status
                            }
                            $OutObj += [pscustomobject]$inobj
                        } catch {
                            Write-PScriboMessage -IsWarning $_.Exception.Message
                        }
                    }
                } catch {
                    Write-PScriboMessage -IsWarning $_.Exception.Message
                }

                if ($HealthCheck.CA.Status) {
                    $OutObj | Where-Object { $_.'Health' -notlike 'OK' } | Set-Style -Style Critical -Property 'Health'
                }

                $TableParams = @{
                    Name = "Certification Authority Health - $($ForestInfo.ToString().ToUpper())"
                    List = $false
                    ColumnWidths = 40, 40, 20
                }
                if ($Report.ShowTableCaptions) {
                    $TableParams['Caption'] = "- $($TableParams.Name)"
                }
                $OutObj | Sort-Object -Property 'CA Name' | Table @TableParams
            }
        } catch {
            Write-PScriboMessage -IsWarning $_.Exception.Message
        }
    }

    end {}

}