Skip to content

Commit 4187e3a

Browse files
authored
Add RPC encryption CA reg key
1 parent df754be commit 4187e3a

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

‎src/Runtime/ObjectProcessors.cs‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -829,6 +829,7 @@ await HandleCompStatusEvent(new CSVComputerStatus
829829
var isUserSpecifiesSanEnabledCollected = false;
830830
var roleSeparationEnabledCollected = false;
831831
var disabledExtensionsCollected = false;
832+
var rPCEncryptionCollected = false;
832833
var caName = entry.GetProperty(LDAPProperties.Name);
833834
var dnsHostName = entry.GetProperty(LDAPProperties.DNSHostName);
834835
if (caName != null && dnsHostName != null) {
@@ -852,6 +853,7 @@ await HandleCompStatusEvent(new CSVComputerStatus
852853
resolvedSearchResult.Domain, dnsHostName, ret.HostingComputer),
853854
RoleSeparationEnabled = await _certAbuseProcessor.IsRoleSeparationEnabled(dnsHostName, caName, ret.HostingComputer),
854855
DisabledExtensions = await _certAbuseProcessor.DisabledExtensions(dnsHostName, caName, ret.HostingComputer),
856+
RPCEncryptionEnforced = await _certAbuseProcessor.IsRPCEncryptionEnforced(dnsHostName, caName, ret.HostingComputer),
855857

856858
// The CASecurity exist in the AD object DACL and in registry of the CA server. We prefer to use the values from registry as they are the ground truth.
857859
// If changes are made on the CA server, registry and the AD object is updated. If changes are made directly on the AD object, the CA server registry is not updated.
@@ -864,6 +866,7 @@ await HandleCompStatusEvent(new CSVComputerStatus
864866
isUserSpecifiesSanEnabledCollected = cARegistryData.IsUserSpecifiesSanEnabled.Collected;
865867
roleSeparationEnabledCollected = cARegistryData.RoleSeparationEnabled.Collected;
866868
disabledExtensionsCollected = cARegistryData.DisabledExtensions.Collected;
869+
rPCEncryptionCollected = cARegistryData.RPCEncryptionEnforced.Collected;
867870
ret.CARegistryData = cARegistryData;
868871
} else {
869872
_log.LogWarning("The CA name or dnsHostname properties are null.");
@@ -874,6 +877,7 @@ await HandleCompStatusEvent(new CSVComputerStatus
874877
ret.Properties.Add("isuserspecifiessanenabledcollected", isUserSpecifiesSanEnabledCollected);
875878
ret.Properties.Add("roleseparationenabledcollected", roleSeparationEnabledCollected);
876879
ret.Properties.Add("disabledextensionscollected", disabledExtensionsCollected);
880+
ret.Properties.Add("rpcencryptioncollected", rPCEncryptionCollected);
877881
}
878882

879883
return ret;

0 commit comments

Comments
 (0)