/// <summary>
/// GetConfig method implementation
/// </summary>
private static byte[] GetConfig(MFAConfig config)
{
using (AESSystemEncryption MSIS = new AESSystemEncryption())
{
config.KeysConfig.XORSecret = MSIS.Encrypt(config.KeysConfig.XORSecret);
config.Hosts.ActiveDirectoryHost.Password = MSIS.Encrypt(config.Hosts.ActiveDirectoryHost.Password);
config.MailProvider.Password = MSIS.Encrypt(config.MailProvider.Password);
};
XmlConfigSerializer xmlserializer = new XmlConfigSerializer(typeof(MFAConfig));
MemoryStream stm = new MemoryStream();
using (StreamReader reader = new StreamReader(stm))
{
xmlserializer.Serialize(stm, config);
stm.Position = 0;
byte[] bytes = null;
using (AESSystemEncryption aes = new AESSystemEncryption())
{
bytes = aes.Encrypt(stm.ToArray());
}
return(bytes);
}
}
/// <summary>
/// Encrypt method implementation
/// </summary>
public override byte[] Encrypt(byte[] data, string description = "")
{
try
{
if (CngKey.Exists(SystemUtilities.SystemKeyName, KeyStorageProvider, CngKeyOpenOptions.MachineKey))
{
using (RSASystemEncryption enc = new RSASystemEncryption())
{
return(enc.Encrypt(data, description));
}
}
else
{
using (AESSystemEncryption enc = new AESSystemEncryption())
{
return(enc.Encrypt(data, description));
}
}
}
catch
{
return(data);
}
}
/// <summary>
/// SetMFACredentials method implementation
/// </summary>
internal static void SetMFACredentials(PSHost host, byte kind, string value, bool clearvalue = false)
{
MFAConfig config = CFGUtilities.ReadConfigurationFromADFSStore(host);
if (config == null)
{
return;
}
switch (kind)
{
case 0x00:
using (AESSystemEncryption MSIS = new AESSystemEncryption())
{
if (clearvalue)
{
config.Hosts.ActiveDirectoryHost.Password = string.Empty;
config.Hosts.ActiveDirectoryHost.Account = string.Empty;
config.Hosts.ActiveDirectoryHost.DomainAddress = string.Empty;
config.MailProvider.Password = string.Empty;
config.MailProvider.UserName = string.Empty;
config.MailProvider.Anonymous = true;
config.KeysConfig.XORSecret = XORUtilities.DefaultKey;
}
else
{
config.Hosts.ActiveDirectoryHost.Password = MSIS.Encrypt(config.Hosts.ActiveDirectoryHost.Password);
config.MailProvider.Password = MSIS.Encrypt(config.MailProvider.Password);
config.KeysConfig.XORSecret = MSIS.Encrypt(config.KeysConfig.XORSecret);
if (!string.IsNullOrEmpty(value))
{
host.UI.WriteWarningLine("Block Updates not allowed, values where only encrypted !");
}
}
}
break;
case 0x01:
using (AESSystemEncryption MSIS = new AESSystemEncryption())
{
if (clearvalue)
{
config.Hosts.ActiveDirectoryHost.Password = string.Empty;
config.Hosts.ActiveDirectoryHost.Account = string.Empty;
config.Hosts.ActiveDirectoryHost.DomainAddress = string.Empty;
}
else
{
if (string.IsNullOrEmpty(value))
{
config.Hosts.ActiveDirectoryHost.Password = MSIS.Encrypt(config.Hosts.ActiveDirectoryHost.Password);
host.UI.WriteWarningLine("Empty value not allowed, value was only encrypted !");
}
else
{
config.Hosts.ActiveDirectoryHost.Password = MSIS.Encrypt(value);
}
}
}
break;
case 0x02:
using (AESSystemEncryption MSIS = new AESSystemEncryption())
{
if (clearvalue)
{
config.MailProvider.Password = string.Empty;
config.MailProvider.UserName = string.Empty;
config.MailProvider.Anonymous = true;
}
else
{
if (string.IsNullOrEmpty(value))
{
config.MailProvider.Password = MSIS.Encrypt(config.MailProvider.Password);
host.UI.WriteWarningLine("Empty value not allowed, value was only encrypted !");
}
else
{
config.MailProvider.Password = MSIS.Encrypt(value);
}
}
}
break;
case 0x03:
using (AESSystemEncryption MSIS = new AESSystemEncryption())
{
if (clearvalue)
{
config.KeysConfig.XORSecret = XORUtilities.DefaultKey;
}
else
{
if (string.IsNullOrEmpty(value))
{
config.KeysConfig.XORSecret = MSIS.Encrypt(config.KeysConfig.XORSecret);
host.UI.WriteWarningLine("Empty value not allowed, value was only encrypted !");
}
else
{
config.KeysConfig.XORSecret = MSIS.Encrypt(value);
}
}
}
break;
}
CFGUtilities.WriteConfigurationToDatabase(host, config, false);
CFGUtilities.BroadcastNotification(config, NotificationsKind.ConfigurationCreated, Environment.MachineName, true, true);
}