protected override void ProcessRecord()
{
if (ShouldProcess(string.Empty, Properties.Resources.CreateCertificatePolicy))
{
// Validate input parameters
ValidateSubjectName();
ValidateDnsNames();
ValidateKeyUsage();
ValidateEkus();
ValidateRenewAtNumberOfDaysBeforeExpiry();
ValidateRenewAtPercentageLifetime();
// Validate combinations of parameters
ValidateBothPercentageAndNumberOfDaysAreNotPresent();
ValidateAtLeastOneOfSubjectNameAndDnsNamesIsPresent();
var policy = new KeyVaultCertificatePolicy
{
DnsNames = DnsNames,
KeyUsage = KeyUsage,
Ekus = Ekus,
Enabled = !Disabled.IsPresent,
IssuerName = IssuerName,
CertificateType = CertificateType,
RenewAtNumberOfDaysBeforeExpiry = RenewAtNumberOfDaysBeforeExpiry,
RenewAtPercentageLifetime = RenewAtPercentageLifetime,
EmailAtNumberOfDaysBeforeExpiry = EmailAtNumberOfDaysBeforeExpiry,
EmailAtPercentageLifetime = EmailAtPercentageLifetime,
ReuseKeyOnRenewal = ReuseKeyOnRenewal.IsPresent,
SecretContentType = SecretContentType,
SubjectName = SubjectName,
ValidityInMonths = ValidityInMonths,
Kty = KeyType,
Exportable = KeyNotExportable.IsPresent ? !KeyNotExportable.IsPresent : (bool?)null
};
this.WriteObject(policy);
}
}
protected override void ProcessRecord()
{
CertificatePolicy certificatePolicy;
try
{
certificatePolicy = this.DataServiceClient.GetCertificatePolicy(this.VaultName, this.Name);
}
catch (KeyVaultErrorException exception)
{
if (exception.Response.StatusCode != System.Net.HttpStatusCode.NotFound)
{
throw;
}
certificatePolicy = null;
}
if (certificatePolicy != null)
{
this.WriteObject(KeyVaultCertificatePolicy.FromCertificatePolicy(certificatePolicy));
}
}
protected override void ProcessRecord()
{
if (ShouldProcess(Name, Properties.Resources.SetCertificatePolicy))
{
KeyVaultCertificatePolicy policy;
switch (ParameterSetName)
{
case ExpandedParameterSet:
// Validate input parameters
ValidateSubjectName();
ValidateDnsNames();
ValidateKeyUsage();
ValidateEkus();
ValidateRenewAtNumberOfDaysBeforeExpiry();
ValidateRenewAtPercentageLifetime();
// Validate combinations of parameters
ValidateBothPercentageAndNumberOfDaysAreNotPresent();
policy = new KeyVaultCertificatePolicy
{
DnsNames = DnsNames,
KeyUsage = KeyUsage,
Ekus = Ekus,
Enabled = !Disabled.IsPresent,
IssuerName = IssuerName,
CertificateType = CertificateType,
RenewAtNumberOfDaysBeforeExpiry = RenewAtNumberOfDaysBeforeExpiry,
RenewAtPercentageLifetime = RenewAtPercentageLifetime,
EmailAtNumberOfDaysBeforeExpiry = EmailAtNumberOfDaysBeforeExpiry,
EmailAtPercentageLifetime = EmailAtPercentageLifetime,
SecretContentType = SecretContentType,
SubjectName = SubjectName,
ValidityInMonths = ValidityInMonths,
Kty = KeyType,
Exportable = KeyNotExportable.IsPresent ? !KeyNotExportable.IsPresent : (bool?)null
};
if (ReuseKeyOnRenewal.HasValue)
{
policy.ReuseKeyOnRenewal = ReuseKeyOnRenewal.Value;
}
break;
case ByValueParameterSet:
policy = CertificatePolicy;
break;
default:
throw new ArgumentException(PSKeyVaultProperties.Resources.BadParameterSetName);
}
var resultantPolicy = DataServiceClient.UpdateCertificatePolicy(VaultName, Name, policy.ToCertificatePolicy());
if (PassThru.IsPresent)
{
this.WriteObject(KeyVaultCertificatePolicy.FromCertificatePolicy(resultantPolicy));
}
}
}
