/*************************************************************************
 *                                                                       *
 *  SignServer: The OpenSource Automated Signing Server                  *
 *                                                                       *
 *  This software is free software; you can redistribute it and/or       *
 *  modify it under the terms of the GNU Lesser General Public           *
 *  License as published by the Free Software Foundation; either         *
 *  version 2.1 of the License, or any later version.                    *
 *                                                                       *
 *  See terms of license at gnu.org.                                     *
 *                                                                       *
 *************************************************************************/
package org.signserver.admin.cli.defaultimpl;

import java.io.FileOutputStream;
import java.rmi.RemoteException;
import java.security.cert.Certificate;
import java.security.cert.X509Certificate;
import java.util.*;
import org.ejbca.util.Base64;
import org.signserver.cli.spi.CommandFailureException;
import org.signserver.cli.spi.IllegalCommandArgumentsException;
import org.signserver.cli.spi.UnexpectedCommandFailureException;
import org.signserver.common.AuthorizedClient;
import org.signserver.common.GlobalConfiguration;
import org.signserver.common.ProcessableConfig;
import org.signserver.common.WorkerConfig;

/**
 * Command used to dump all configured properties for a worker or all workers
 *
 * @version $Id: DumpPropertiesCommand.java 2442 2012-06-30 18:08:42Z netmackan $
 */
public class DumpPropertiesCommand extends AbstractAdminCommand {

    @Override
    public String getDescription() {
        return "Exports global or worker properties to file";
    }

    @Override
    public String getUsages() {
        return "Usage: signserver dumpproperties < all | workerid > <outfile>\n"
                    + "Example 1: signserver dumpproperties 1 myworkerbackup.properties\n"
                    + "Example 2: signserver dumpproperties all singserverbackup.properties\n\n";
    }

    @Override
    public int execute(String... args) throws IllegalCommandArgumentsException, CommandFailureException, UnexpectedCommandFailureException {
        if (args.length != 2) {
            throw new IllegalCommandArgumentsException("Wrong number of arguments");
        }
        try {

            String outfile = args[1];
            String workerid = args[0];

            Properties outProps = new Properties();

            if (workerid.substring(0, 1).matches("\\d")) {
                dumpWorkerProperties(Integer.parseInt(workerid), outProps);
            } else {
                if (workerid.trim().equalsIgnoreCase("ALL")) {
                    dumpAllProperties(outProps);
                } else {
                    // named worker is requested
                    int id = getWorkerSession().getWorkerId(workerid);
                    if (id == 0) {
                        throw new IllegalCommandArgumentsException("Error: No worker with the given name could be found");
                    }
                    dumpWorkerProperties(id, outProps);
                }
            }

            FileOutputStream fos = new FileOutputStream(outfile);
            outProps.store(fos, null);
            fos.close();
            getOutputStream().println("Properties successfully dumped into file " + outfile);

            this.getOutputStream().println("\n\n");
            return 0;

        } catch (IllegalCommandArgumentsException ex) {
            throw ex;
        } catch (Exception e) {
            throw new UnexpectedCommandFailureException(e);
        }
    }

    private void dumpAllProperties(Properties outProps) throws RemoteException, Exception {
        List<Integer> workers = getWorkerSession().getWorkers(GlobalConfiguration.WORKERTYPE_ALL);

        // First output all global properties
        GlobalConfiguration gc = getGlobalConfigurationSession().getGlobalConfiguration();
        Enumeration<String> en = gc.getKeyEnumeration();
        while (en.hasMoreElements()) {
            String next = en.nextElement();
            outProps.put(next, gc.getProperty(next));
        }
        Iterator<Integer> iter = workers.iterator();
        while (iter.hasNext()) {
            Integer next = (Integer) iter.next();
            dumpWorkerProperties(next, outProps);
        }
    }

    private void dumpWorkerProperties(int workerId, Properties outProps) throws RemoteException, Exception {
        GlobalConfiguration gc = getGlobalConfigurationSession().getGlobalConfiguration();
        Enumeration<String> en = gc.getKeyEnumeration();
        while (en.hasMoreElements()) {
            String next = en.nextElement();
            if (next.substring(5).startsWith("WORKER" + workerId)) {
                outProps.put(next, gc.getProperty(next));
            }
        }

        WorkerConfig workerConfig = getWorkerSession().getCurrentWorkerConfig(workerId);
        Enumeration<?> e = workerConfig.getProperties().keys();
        Properties workerProps = workerConfig.getProperties();
        while (e.hasMoreElements()) {
            String key = (String) e.nextElement();
            outProps.setProperty("WORKER" + workerId + "." + key, workerProps.getProperty(key));
        }

        // Also dump Authorized Clients and/or signer certificates
        ProcessableConfig pConfig = new ProcessableConfig(workerConfig);
        if (pConfig.getSignerCertificate() != null) {
            X509Certificate cert = pConfig.getSignerCertificate();
            outProps.setProperty("WORKER" + workerId + SetPropertiesHelper.SIGNERCERTIFICATE, new String(Base64.encode(cert.getEncoded(), false)));
        }
        if (pConfig.getSignerCertificateChain() != null) {
            Collection<Certificate> certs = pConfig.getSignerCertificateChain();
            Iterator<Certificate> iter2 = certs.iterator();
            String chainValue = "";
            while (iter2.hasNext()) {
                Certificate cert = iter2.next();
                String certData = new String(Base64.encode(cert.getEncoded(), false));
                if (chainValue.equals("")) {
                    chainValue = certData;
                } else {
                    chainValue += ";" + certData;
                }
            }

            outProps.setProperty("WORKER" + workerId + SetPropertiesHelper.SIGNERCERTCHAIN, chainValue);
        }

        if (pConfig.getAuthorizedClients().size() > 0) {
            Collection<AuthorizedClient> aClients = pConfig.getAuthorizedClients();
            int i = 1;
            for (AuthorizedClient client : aClients) {
                outProps.setProperty("WORKER" + workerId + SetPropertiesHelper.AUTHCLIENT + i, client.getCertSN() + ";" + client.getIssuerDN());
                i++;
            }
        }
    }
}