package org.cagrid.trust.service.test.utils;

import org.bouncycastle.asn1.x509.X509Name;
import org.cagrid.gaards.pki.CRLEntry;
import org.cagrid.gaards.pki.CertUtil;
import org.cagrid.gaards.pki.KeyUtil;

import java.security.*;
import java.security.cert.X509CRL;
import java.security.cert.X509Certificate;
import java.util.Calendar;
import java.util.Date;
import java.util.GregorianCalendar;

/**
 * @author <A href="mailto:langella@bmi.osu.edu">Stephen Langella </A>
 * @author <A href="mailto:oster@bmi.osu.edu">Scott Oster </A>
 * @author <A href="mailto:hastings@bmi.osu.edu">Shannon Hastings </A>
 * @version $Id: ArgumentManagerTable.java,v 1.2 2004/10/15 16:35:16 langella
 *          Exp $
 */
public class CA {
    private X509Certificate cert;
    private PrivateKey key;
    private X509CRL crl;
    public static final Provider PROVIDER = new org.bouncycastle.jce.provider.BouncyCastleProvider();
    public static final String SIGNATURE_ALGORITHM = CertUtil.SHA2_SIGNATURE_ALGORITHM;
    public static final String PASSWORD = "password";
    public final static String DEFAULT_CA_DN = "O=Organization ABC,OU=Unit XYZ,CN=Certificate Authority";

    private KeyStore keyStore;

    public CA() throws Exception {
        this(DEFAULT_CA_DN);
    }

    public CA(String dn) throws Exception {
        Security.addProvider(PROVIDER);
        Calendar c = new GregorianCalendar();
        Date now = c.getTime();
        c.add(Calendar.YEAR, 5);
        Date expires = c.getTime();
        KeyPair pair = KeyUtil.generateRSAKeyPair2048(PROVIDER.getName());
        this.key = pair.getPrivate();
        cert = CertUtil.generateCACertificate(PROVIDER.getName(), new X509Name(dn), now, expires, pair, SIGNATURE_ALGORITHM);
    }

    public CA(String dn, Date start, Date expires) throws Exception {
        KeyPair pair = KeyUtil.generateRSAKeyPair2048(PROVIDER.getName());
        this.key = pair.getPrivate();
        cert = CertUtil.generateCACertificate(PROVIDER.getName(), new X509Name(dn), start, expires, pair, SIGNATURE_ALGORITHM);
    }

    public CA(X509Certificate cert, PrivateKey key, X509CRL crl) {
        this.cert = cert;
        this.key = key;
        this.crl = crl;
    }

    public X509Certificate getCertificate() {
        return cert;
    }

    public Credential createIdentityCertificate(String id) throws Exception {
        String dn = getCertificate().getSubjectDN().getName();
        int index = dn.indexOf("CN=");
        dn = dn.substring(0, index + 3) + id;
        KeyPair pair = KeyUtil.generateRSAKeyPair2048(PROVIDER.getName());
        Date now = new Date();
        Date end = getCertificate().getNotAfter();
        Credential cred = new Credential(CertUtil.generateCertificate(PROVIDER.getName(), new X509Name(dn), now, end, pair.getPublic(), getCertificate(), getPrivateKey(), SIGNATURE_ALGORITHM, null),
                pair.getPrivate());
        return cred;
    }

    public X509CRL getCRL() {
        return crl;
    }

    public PrivateKey getPrivateKey() {
        return key;
    }

    public X509CRL updateCRL(CRLEntry entry) throws Exception {
        CRLEntry[] entries = new CRLEntry[1];
        entries[0] = entry;
        crl = CertUtil.createCRL(PROVIDER.getName(), cert, key, entries, cert.getNotAfter(), SIGNATURE_ALGORITHM);
        return crl;
    }

    public X509CRL updateCRL(CRLEntry[] entries) throws Exception {
        crl = CertUtil.createCRL(PROVIDER.getName(), cert, key, entries, cert.getNotAfter(), SIGNATURE_ALGORITHM);
        return crl;
    }


}