From 451156969a56348a6a95a5b6976ebc2a3ffa03a0 Mon Sep 17 00:00:00 2001
From: Alvaro Sedano <al_sedano@hotmail.com>
Date: Sun, 21 Jul 2019 12:34:30 +0200
Subject: [PATCH] Delete pfSenseCerts.ps1

---
 pfSenseCerts.ps1 | 88 ------------------------------------------------
 1 file changed, 88 deletions(-)
 delete mode 100644 pfSenseCerts.ps1

diff --git a/pfSenseCerts.ps1 b/pfSenseCerts.ps1
deleted file mode 100644
index 4e3b7b3..0000000
--- a/pfSenseCerts.ps1
+++ /dev/null
@@ -1,88 +0,0 @@
-####
-### Extracting pfSense Certificates (without private key)
-####
-# Redefine the $cfg string variable to point to a valid unecripted pfSense Configuration XML file
-# The script will return the CA certificates, Server certificates, User certificated (used or not used) and duplicate Serial Number Certificates
-#
-# Tested on PowerShell 5 and avobe
-# Created by Alvaro Sedano Galindo. al_sedano@hotmail.com
-#
-
-Function Get-CN {
-    Param([Parameter(Mandatory=$true)][string]$name)
-    if($name -match "CN=([^,]*)") {
-        $Matches[1] }
-    else {$name}
-}
-
-Function Add-Lista {
-    Param([Parameter(Mandatory=$true)][ref]$lista `
-         ,[Parameter(Mandatory=$true)][ref]$obj `
-         ,[Parameter(Mandatory=$true)][bool]$fromCA)
-
-    [string]$oidCLI = '1.3.6.1.5.5.7.3.2'
-    [string]$oidSRV = '1.3.6.1.5.5.7.3.1'
-    [array]$revs = $listaR | Select -ExpandProperty refid -Unique
-    [System.Security.Cryptography.X509Certificates.X509Certificate2]$ccc = $null
-    foreach($c in $obj.Value) {
-        $ccc = [System.Security.Cryptography.X509Certificates.X509Certificate2]::new([System.Convert]::FromBase64String($c.crt))
-        $ccc.FriendlyName = $c.descr.'#cdata-section'
-        $lista.Value += $ccc | Select *, @{N='IsCA';E={$fromCA}} `
-                                  , @{N='IsServer';E={-not $fromCA -and $_.EnhancedKeyUsageList.ObjectId -contains $oidSRV}} `
-                                  , @{N='IsClient';E={-not $fromCA -and $_.EnhancedKeyUsageList.ObjectId -contains $oidCLI}} `
-                                  , @{N='sIssuer';E={Get-CN($_.Issuer)}}, @{N='sSubject';E={Get-CN($_.Subject)}} `
-                                  , @{N='refid'; E={$c.refid}} `
-                                  , @{N='isRevoked'; E={-not $fromCA -and $c.refid -in $revs}}
-                                  #, @{N='refid'; E={$c.refid}}, @{N='isRevoked'; E={(-not $fromCA) -and ($_.refid -in $listaR.refid)}}
-    }
-}
-
-
-#$CRL = New-Object -ComObject "X509Enrollment.CX509CertificateRevocationList"
-#$CRLContents = [System.Convert]::ToBase64String((Get-Content "C:\Users\ASG\Downloads\revocados.crl" -Encoding Byte))
-#[System.Security.Cryptography.X509Certificates.X509CRL2]$ccc = $null
-
-#https://msdnshared.blob.core.windows.net/media/2016/04/CRLFreshCheck.psm1_.txt
-
-#
-# BODY
-#
-
-#Read XML pfSense config file
-[string]$cfg = "$env:USERPROFILE\Downloads\config-pfSense01.casi.es.private.xml"
-#[string]$cfg = "C:\Users\ASG\Downloads\config-e.tecnube.es-20190630223501.xml"
-[xml]$aaa = Get-Content $cfg -Encoding Default
-
-#Get the CRL revocation list
-[DateTime]$o = '1970-01-01'
-#[array]$listaR = $aaa.pfsense.crl.cert | Select caref, refid, reason, @{N='revDate';E={$o.AddSeconds($_.revoke_time)}}
-[array]$listaR = @()
-foreach($r in $aaa.pfsense.crl) {
-    $listaR += $r.cert | Select @{N='listRev';E={$r.descr.'#cdata-section'}}, caref, refid, reason, @{N='revDate';E={$o.AddSeconds($_.revoke_time)}}
-}
-
-#Add CA Certificates to $listaC (WITHOUT private keys)
-[array]$listaC = @()
-Add-Lista -lista ([ref]$listaC) -obj ([ref]$aaa.pfsense.ca) -fromCA $true
-
-#Add user/server certificates to $listaC (WITHOUT private keys)
-Add-Lista -lista ([ref]$listaC) -obj ([ref]$aaa.pfsense.cert) -fromCA $false
-#Note: User Certificates created with old pfSense versions can set the EnhancedKeyUsageList property to <empty>
-
-Remove-Variable aaa, r
-
-#List of CA Certificates
-Write-Output "`nCA Certificates"
-$listaC | Where-Object {$_.isCA} | Select sIssuer, SerialNumber, FriendlyName, DnsNameList, sSubject | Sort-Object -Property sIssuer, SerialNumber | ft
-
-#List of Server Certificates
-Write-Output "`nServer Certificates"
-$listaC | Where-Object {$_.isServer} | Select sIssuer, SerialNumber, FriendlyName, DnsNameList, sSubject | Sort-Object -Property sIssuer, SerialNumber | ft
-
-#List of User Certificates (not CA and not Server)
-Write-Output "`nUser Certificates"
-$listaC | Where-Object {-not ($_.isCA -or $_.isServer)} | Select sIssuer, SerialNumber, FriendlyName, DnsNameList, sSubject | Sort-Object -Property sIssuer, SerialNumber | ft
-
-#List of Dupicated SerialNumbers (per CA)
-Write-Output "`nDuplicated Serial Numbers (per CA)"
-$listaC | Select sIssuer, SerialNumber, FriendlyName, DnsNameList, sSubject | Group-Object -Property sIssuer, SerialNumber | Where-Object {$_.Count -gt 1} | Select -ExpandProperty Group | ft