build__01__credentials.ps1

################################################
#
# SCRIPT ROOT
#
################################################

# Load scriptpath
if ($MyInvocation.MyCommand.CommandType -eq "ExternalScript") {
    $scriptPath = Split-Path -Parent -Path $MyInvocation.MyCommand.Definition
} else {
    $scriptPath = Split-Path -Parent -Path ([Environment]::GetCommandLineArgs()[0])
}


Set-Location -Path $scriptPath


################################################
#
# SETTINGS
#
################################################

# Load settings
$settingsFilename = "settings.json"
$functionsSubfolder = "functions"

# Load settings
$settings = Get-Content -Path "$( $scriptPath )\$( $settingsFilename )" -Encoding UTF8 -Raw | ConvertFrom-Json


################################################
#
# FUNCTIONS
#
################################################

# load assemblies
Add-Type -AssemblyName System.Security

Get-ChildItem -Path ".\$( $functionsSubfolder )" | ForEach {
    . $_.FullName
}


################################################
#
# ENCRYPTION KEYS
#
################################################

# create encryption keys
$cspParams = New-Object "System.Security.Cryptography.CspParameters"
$cspParams.KeyContainerName = $settings.encryption.keyContainerName
$rsaKey = [System.Security.Cryptography.RSACryptoServiceProvider]::new($cspParams)
$keyName = $settings.encryption.keyName

# create encryption key
$sessionKey = new-object "System.Security.Cryptography.RijndaelManaged"
$sessionKey.KeySize = $settings.encryption.keySize


################################################
#
# CREATE XML FILE
#
################################################

$variables = [PSCustomObject]@{
    "databaseUser" = Read-Host "Please enter the username for the database"
    "databasePassword" = "secure#$( Read-Host "Please enter the password for the database" -AsSecureString | convertfrom-securestring )"
}

$variablesXML = $variables | ConvertTo-Xml


################################################
#
# ENCRYPTION XML PARTS
#
################################################

# load xml file
#$xml = New-Object "xml"
#$xml.PreserveWhitespace
#$xml.Load($settings.variablesXML)
$xml = $variablesXML

$settings.encryption.elementsToEncrypt | ForEach {

    $tag = $_

    # select the xml element
    $xmlElement = $xml.GetElementsByTagName($tag)[0]

    # encrypt xml element
    $eXml = new-object "System.Security.Cryptography.Xml.EncryptedXml"
    $encryptedElement = $eXml.EncryptData($xmlElement,$sessionKey,$false)

    # describe encryption
    $edElement = New-Object "System.Security.Cryptography.Xml.EncryptedData"
    $edElement.Type = [System.Security.Cryptography.Xml.EncryptedXml]::XmlEncElementUrl
    $edElement.Id = $tag
    $edElement.EncryptionMethod = [System.Security.Cryptography.Xml.EncryptedXml]::XmlEncAES256Url
    #$edElement.CipherData.CipherValue = $encryptedElement

    # create encrypted key
    $ek = New-Object "System.Security.Cryptography.Xml.EncryptedKey"
    $encryptedKey = [System.Security.Cryptography.Xml.EncryptedXml]::EncryptKey($sessionKey.Key, $rsaKey, $false)
    $ek.CipherData = [System.Security.Cryptography.Xml.CipherData]::new($encryptedKey)
    $ek.EncryptionMethod = [System.Security.Cryptography.Xml.EncryptionMethod]::new([System.Security.Cryptography.Xml.EncryptedXml]::XmlEncRSA15Url)
    
    # create data reference
    $dRef = New-Object "System.Security.Cryptography.Xml.DataReference"
    $dRef.Uri = "#" + $tag
    $ek.AddReference($dRef)
    $edElement.KeyInfo.AddClause([System.Security.Cryptography.Xml.KeyInfoEncryptedKey]::new($ek))
    
    # create key info
    $kin = New-Object "System.Security.Cryptography.Xml.KeyInfoName"
    $kin.Value = $keyName
    $ek.KeyInfo.AddClause($kin)
    $edElement.CipherData.CipherValue = $encryptedElement
    
    # replace element
    [System.Security.Cryptography.Xml.EncryptedXml]::ReplaceElement($xmlElement,$edElement,$false)

}

# save the xml
$xml.Save($settings.variablesXML)


# finally
$sessionKey.Clear()