DSCResources/DSC_WaitForCertificateServices/DSC_WaitForCertificateServices.psm1

# Suppressed as per PSSA Rule Severity guidelines for unit/integration tests:
# https://github.com/PowerShell/DscResources/blob/master/PSSARuleSeverities.md
#Requires -Version 4.0

$modulePath = Join-Path -Path (Split-Path -Path (Split-Path -Path $PSScriptRoot -Parent) -Parent) -ChildPath 'Modules'

# Import the Certificate PDT Helper Module
Import-Module -Name (Join-Path -Path $modulePath `
        -ChildPath (Join-Path -Path 'CertificateDsc.PDT' `
            -ChildPath 'CertificateDsc.PDT.psm1'))

# Import the Certificate Resource Common Module.
Import-Module -Name (Join-Path -Path $modulePath `
        -ChildPath (Join-Path -Path 'CertificateDsc.Common' `
            -ChildPath 'CertificateDsc.Common.psm1'))

Import-Module -Name (Join-Path -Path $modulePath -ChildPath 'DscResource.Common')

# Import Localization Strings.
$script:localizedData = Get-LocalizedData -DefaultUICulture 'en-US'

<#
    .SYNOPSIS
        Returns the current state of the wait for Active Directory Certificate
        Service Certificate Authority resource.
 
    .PARAMETER CAServerFQDN
        The FQDN of the Active Directory Certificate Service Certificate Authority to wait
        for. Leave empty to automatically detect.
 
    .PARAMETER CARootName
        The name of the Active Directory Certificate Service Certificate Authority to wait
        for. Leave empty to automatically detect.
 
    .PARAMETER RetryIntervalSeconds
        Specifies the number of seconds to wait for the Active Directory Certificate
        Service Certificate Authority to become available. Defaults to 10 seconds.
 
    .PARAMETER RetryCount
        The number of times to loop the retry interval while waiting for the Active
        Directory Certificate Service Certificate Authority. Defaults to 60 retries.
#>

function Get-TargetResource
{
    [CmdletBinding()]
    [OutputType([System.Collections.Hashtable])]
    param
    (
        [Parameter(Mandatory = $true)]
        [System.String]
        $CAServerFQDN,

        [Parameter(Mandatory = $true)]
        [System.String]
        $CARootName,

        [Parameter()]
        [System.UInt32]
        $RetryIntervalSeconds = 10,

        [Parameter()]
        [System.UInt32]
        $RetryCount = 60
    )

    $certificateAuthorityFullName = "$CAServerFQDN\$CARootName"

    Write-Verbose -Message ( @(
            "$($MyInvocation.MyCommand): "
            $($script:localizedData.GettingWaitForCertificateAuthorityStatusMessage -f $certificateAuthorityFullName)
        ) -join '' )

    $returnValue = @{
        CAServerFQDN         = $CAServerFQDN
        CARootName           = $CARootName
        RetryIntervalSeconds = $RetryIntervalSeconds
        RetryCount           = $RetryCount
    }
    return $returnValue
} # function Get-TargetResource

<#
    .SYNOPSIS
        Waits for the Active Directory Certificate Service Certificate Authority to become
        available or times out.
 
    .PARAMETER CAServerFQDN
        The FQDN of the Active Directory Certificate Service Certificate Authority to wait
        for. Leave empty to automatically detect.
 
    .PARAMETER CARootName
        The name of the Active Directory Certificate Service Certificate Authority to wait
        for. Leave empty to automatically detect.
 
    .PARAMETER RetryIntervalSeconds
        Specifies the number of seconds to wait for the Active Directory Certificate
        Service Certificate Authority to become available. Defaults to 10 seconds.
 
    .PARAMETER RetryCount
        The number of times to loop the retry interval while waiting for the Active
        Directory Certificate Service Certificate Authority. Defaults to 60 retries.
#>

function Set-TargetResource
{
    [CmdletBinding()]
    param
    (
        [Parameter(Mandatory = $true)]
        [System.String]
        $CAServerFQDN,

        [Parameter(Mandatory = $true)]
        [System.String]
        $CARootName,

        [Parameter()]
        [System.UInt32]
        $RetryIntervalSeconds = 10,

        [Parameter()]
        [System.UInt32]
        $RetryCount = 60
    )

    $certificateAuthorityFullName = "$CAServerFQDN\$CARootName"

    Write-Verbose -Message ( @(
            "$($MyInvocation.MyCommand): "
            $($script:localizedData.CheckingForCertificateAuthorityStatusMessage -f $certificateAuthorityFullName)
        ) -join '' )

    $certificateAuthorityFound = $false

    for ($count = 0; $count -lt $RetryCount; $count++)
    {
        if (Test-CertificateAuthority `
                -CAServerFQDN $CAServerFQDN `
                -CARootName $CARootName)
        {
            Write-Verbose -Message ( @(
                    "$($MyInvocation.MyCommand): "
                    $($script:localizedData.CertificateAuthorityFoundMessage -f $certificateAuthorityFullName)
                ) -join '' )

            $certificateAuthorityFound = $true
            break
        }
        else
        {
            Write-Verbose -Message ( @(
                    "$($MyInvocation.MyCommand): "
                    $($script:localizedData.CertificateAuthorityNotFoundRetryingMessage -f $certificateAuthorityFullName, $RetryIntervalSeconds)
                ) -join '' )

            Start-Sleep -Seconds $RetryIntervalSeconds
        } # if
    } # for

    if (-not $certificateAuthorityFound)
    {
        New-InvalidOperationException `
            -Message $($script:localizedData.CertificateAuthorityNotFoundAfterError -f $certificateAuthorityFullName, $RetryCount)
    } # if
} # function Set-TargetResource

<#
    .SYNOPSIS
        Waits for the Active Directory Certificate Service Certificate Authority to
        become available or times out.
 
    .PARAMETER CAServerFQDN
        The FQDN of the Active Directory Certificate Service Certificate Authority to wait
        for. Leave empty to automatically detect.
 
    .PARAMETER CARootName
        The name of the Active Directory Certificate Service Certificate Authority to wait
        for. Leave empty to automatically detect.
 
    .PARAMETER RetryIntervalSeconds
        Specifies the number of seconds to wait for the Active Directory Certificate
        Service Certificate Authority to become available. Defaults to 10 seconds.
 
    .PARAMETER RetryCount
        The number of times to loop the retry interval while waiting for the Active
        Directory Certificate Service Certificate Authority. Defaults to 60 retries.
#>

function Test-TargetResource
{
    [CmdletBinding()]
    [OutputType([System.Boolean])]
    param
    (
        [Parameter(Mandatory = $true)]
        [System.String]
        $CAServerFQDN,

        [Parameter(Mandatory = $true)]
        [System.String]
        $CARootName,

        [Parameter()]
        [System.UInt32]
        $RetryIntervalSeconds = 10,

        [Parameter()]
        [System.UInt32]
        $RetryCount = 60
    )

    $certificateAuthorityFullName = "$CAServerFQDN\$CARootName"

    Write-Verbose -Message ( @(
            "$($MyInvocation.MyCommand): "
            $($script:localizedData.CheckingForCertificateAuthorityStatusMessage -f $certificateAuthorityFullName)
        ) -join '' )

    if (Test-CertificateAuthority `
            -CAServerFQDN $CAServerFQDN `
            -CARootName $CARootName)
    {
        Write-Verbose -Message ( @(
                "$($MyInvocation.MyCommand): "
                $($script:localizedData.CertificateAuthorityFoundMessage -f $certificateAuthorityFullName)
            ) -join '' )

        return $true
    }

    Write-Verbose -Message ( @(
            "$($MyInvocation.MyCommand): "
            $($script:localizedData.CertificateAuthorityNotFoundMessage -f $certificateAuthorityFullName)
        ) -join '' )

    return $false
} # function Test-TargetResource

Export-ModuleMember -Function *-TargetResource