RS_rsSendClientCert.psm1

function Get-NodeInfo {
    $nodeinfo = Get-Content ([Environment]::GetEnvironmentVariable('nodeInfoPath','Machine').ToString()) -Raw -ErrorAction SilentlyContinue | ConvertFrom-Json
    if(!($nodeinfo)){
        $nodeinfo = Get-Content 'C:\Windows\Temp\nodeinfo.json' -Raw | ConvertFrom-Json 
    }
    return $nodeinfo
}

Function Get-TargetResource {
   param (
      [parameter(Mandatory = $true)]
      [string]$Name, 
      [ValidateSet("Present","Absent")]
      [string] $Ensure,
      [string] $DestinationQueue,
      [string] $MessageLabel = 'execute',
      [string] $dsc_config,
      [string] $shared_key
      )
      
    $nodeinfo = Get-NodeInfo
    if( !($PSBoundParameters.ContainsKey('DestinationQueue')) ){ 
        $DestinationQueue =  "FormatName:DIRECT=HTTPS://",$($nodeinfo.PullServerName),"/msmq/private$/rsdsc" -join ''
    }
    if( !($PSBoundParameters.ContainsKey('dsc_config'))){
        $dsc_config -eq $nodeinfo.dsc_config
    }
    if( !($PSBoundParameters.ContainsKey('shared_key'))){
        $shared_key -eq $nodeinfo.shared_key
    }

    return @{
        'Ensure' = $Ensure
        'DestinationQueue' = $DestinationQueue
        'MessageLabel' = $MessageLabel
        'dsc_config' = $dsc_config
        'shared_key' = $shared_key
      
    }
}

Function Test-TargetResource {
   param (
      [parameter(Mandatory = $true)]
      [string]$Name,
      [ValidateSet("Present","Absent")]
      [string] $Ensure,
      [string] $DestinationQueue,
      [string] $MessageLabel = 'execute',
      [string] $dsc_config,
      [string] $shared_key
      )

    $nodeinfo = Get-NodeInfo
    if( ! ($PSBoundParameters.ContainsKey('DestinationQueue')) ){
        $DestinationQueue =  "FormatName:DIRECT=HTTPS://",$($nodeinfo.PullServerName),"/msmq/private$/rsdsc" -join ''
        Write-Verbose "DestinationQueue: $DestinationQueue"
    }
    #Check if assigned DSC configuration or Shared Key has changed
    if($PSBoundParameters.ContainsKey('dsc_config')){
        if($dsc_config -ne $nodeinfo.dsc_config){
            Write-Verbose -Message "dsc_config has changed. Test failed."
            return $false
        }
    }
    if($PSBoundParameters.ContainsKey('shared_key')){
        if($shared_key -ne $nodeinfo.shared_key){
            Write-Verbose -Message "shared_key has changed. Test failed."
            return $false
        }
    }
    #Check if PullServer has Client MOF available
    $uri = (("https://",$($nodeinfo.PullServerName),":",$($nodeinfo.PullServerPort),"/PSDSCPullServer.svc/Action(ConfigurationId='",$($nodeinfo.uuid),"')/ConfigurationContent") -join '')
    try{
        if( (Invoke-WebRequest -Uri $uri -UseBasicParsing -Verbose).StatusCode -eq 200 ){
            return $true
        }
    }
    catch{
        Write-Verbose -Message "Web request failed. Test failed."
        return $false
    }
}

Function Set-TargetResource {
   
    param (
        [parameter(Mandatory = $true)]
        [string]$Name,
        [ValidateSet("Present","Absent")]
        [string] $Ensure,
        [string] $DestinationQueue,
        [string] $MessageLabel = 'execute',
        [string] $dsc_config,
        [string] $shared_key
    )
   
    $nodeinfo = Get-NodeInfo
    if( $PSBoundParameters.ContainsKey('dsc_config') ){
        $nodeinfo.dsc_config = $dsc_config
    }
    if( $PSBoundParameters.ContainsKey('shared_key') ){
        $nodeinfo.shared_key = $shared_key
    }
    <#
    #Ensure NIC info is updated in nodeinfo
    $network_adapters =  @{}
      
    $Interfaces = Get-NetAdapter | Select -ExpandProperty ifAlias

    foreach($NIC in $interfaces){
        $IPv4 = Get-NetIPAddress | Where-Object {$_.InterfaceAlias -eq $NIC -and $_.AddressFamily -eq 'IPv4'} | Select -ExpandProperty IPAddress
        $IPv6 = Get-NetIPAddress | Where-Object {$_.InterfaceAlias -eq $NIC -and $_.AddressFamily -eq 'IPv6'} | Select -ExpandProperty IPAddress
        $Hash = @{"IPv4" = $IPv4;
                    "IPv6" = $IPv6}
        $network_adapters.Add($NIC,$Hash)
    }
    $nodeinfo.NetworkAdapters = $network_adapters
    #>

    #update bootstrapinfo on disk
   
    Set-Content -Path ([Environment]::GetEnvironmentVariable('nodeInfoPath','Machine').toString()) -Value $($nodeinfo | ConvertTo-Json -Depth 2)

    #Prep MSMQ Message
    
    if( ! ($PSBoundParameters.ContainsKey('DestinationQueue')) ){ 
        $DestinationQueue = "FormatName:DIRECT=HTTPS://",$($nodeinfo.PullServerName),"/msmq/private$/rsdsc" -join '' 
    }
    [Reflection.Assembly]::LoadWithPartialName("System.Messaging") | Out-Null
    $publicCert = ((Get-ChildItem Cert:\LocalMachine\My | ? Subject -eq "CN=$env:COMPUTERNAME`_enc").RawData)
    $msgbody = @{'Name' = "$env:COMPUTERNAME"
        'uuid' = $($nodeinfo.uuid)
        'dsc_config' = $($nodeinfo.dsc_config)
        'shared_key' = $($nodeinfo.shared_key)
        'PublicCert' = "$([System.Convert]::ToBase64String($publicCert))"
    #         'NetworkAdapters' = $($nodeinfo.NetworkAdapters)
    } | ConvertTo-Json
    $msg = New-Object System.Messaging.Message
    $msg.Label = $MessageLabel
    $msg.Body = $msgbody
    $queue = New-Object System.Messaging.MessageQueue ($DestinationQueue, $False, $False)

    #Send message, and then check for available MOF. Will retry Send 5 times if MOF not found, sleeping 30 seconds each

    $uri = ("https://",$($nodeinfo.PullServerName),":",$($nodeinfo.PullServerPort),"/PSDSCPullServer.svc/Action(ConfigurationId='",$($nodeinfo.uuid),"')/ConfigurationContent") -join ''
    $retries = 0
    do{
        $queue.Send($msg)
        $retries ++
        try{
            if( (Invoke-WebRequest -Uri $uri -UseBasicParsing -Verbose).statuscode -eq 200){
                $retries = 5
            }
        }
        catch {
            Start-Sleep -Seconds 30
            Write-Verbose -Message "Sending MSMQ message to $DestinationQueue"
        }
    } while($retries -lt 5)
  
}
Export-ModuleMember -Function *-TargetResource