/***************************************************************************
                          certtree.cpp  -  description
                             -------------------
    begin                : Sun Jun 23 2002
    copyright            : (C) 2002 by ARRL
    author               : Jon Bloom
    email                : jbloom@arrl.org
    revision             : $Id$
 ***************************************************************************/

#include "certtree.h"

#include <errno.h>
#include <wx/imaglist.h>
#include <wx/config.h>
#include <wx/tokenzr.h>
#include <map>
#include <vector>
#include <algorithm>
#include <utility>
#include <iostream>

#include "tqslctrls.h"
#include "util.h"
#include "dxcc.h"
#include "tqslerrno.h"
#include "tqsltrace.h"
#include "wxutil.h"

#include "cert.xpm"
#include "nocert.xpm"
#include "broken-cert.xpm"
#include "folder.xpm"
#include "expired.xpm"
#include "replaced.xpm"

using std::pair;
using std::vector;
using std::map;
using std::make_pair;

enum {
	CERT_ICON = 0,
	NOCERT_ICON = 1,
	BROKEN_ICON = 2,
	EXPIRED_ICON = 3,
	REPLACED_ICON = 4,
	FOLDER_ICON = 5
};

///////////// Certificate Tree Control ////////////////


BEGIN_EVENT_TABLE(CertTree, wxTreeCtrl)
	EVT_TREE_ITEM_ACTIVATED(-1, CertTree::OnItemActivated)
	EVT_RIGHT_DOWN(CertTree::OnRightDown)
	EVT_TREE_KEY_DOWN(wxID_ANY, CertTree::OnKeyDown)
END_EVENT_TABLE()

CertTree::CertTree(wxWindow *parent, const wxWindowID id, const wxPoint& pos,
		const wxSize& size, long style)
		: wxTreeCtrl(parent, id, pos, size, style), _ncerts(0) {
	tqslTrace("CertTree::CertTree", NULL);
	useContextMenu = true;
	wxBitmap certbm(cert_xpm);
	wxBitmap no_certbm(nocert_xpm);
	wxBitmap broken_certbm(broken_cert_xpm);
	wxBitmap folderbm(folder_xpm);
	wxBitmap expiredbm(expired_xpm);
	wxBitmap replacedbm(replaced_xpm);
	il = new wxImageList(16, 16, false, 5);
	if (!il) {
		tqslTrace("CertTree::CertTree", "Out of memory!");
		return;
	}
	il->Add(certbm);
	il->Add(no_certbm);
	il->Add(broken_certbm);
	il->Add(expiredbm);
	il->Add(replacedbm);
	il->Add(folderbm);
	SetImageList(il);
	ACCESSIBLE(this, WindowAccessible);
	this->SetName(_("Callsign Certificates"));
	tabTo = NULL;
}


CertTree::~CertTree() {
	tqslTrace("CertTree::~CertTree", NULL);
	if (_ncerts >0)
		tqsl_freeCertificateList(_certs, _ncerts);
	_certs = NULL;
	_ncerts = 0;
	delete il;
	pktype.clear();
	isExpired.clear();
	superceded.clear();
	keyonly.clear();
}

typedef pair<wxString, int> certitem;
typedef vector<certitem> certlist;

static bool
cl_cmp(const certitem& i1, const certitem& i2) {
	return i1.first < i2.first;
}

int
CertTree::Build(int flags, const TQSL_PROVIDER *provider) {
	tqslTrace("CertTree::Build", "flags=%d, provider=%lx", flags, static_cast<void *>(const_cast<TQSL_PROVIDER *>(provider)));
	typedef map<wxString, certlist> issmap;
	issmap issuers;

	DeleteAllItems();
	wxTreeItemId rootId = AddRoot(_("Callsign Certificates"), FOLDER_ICON);
	if (tqsl_selectCertificates(&_certs, &_ncerts, 0, 0, 0, provider, flags)) {
		if (tQSL_Error != TQSL_SYSTEM_ERROR || tQSL_Errno != ENOENT)
			displayTQSLError(__("Error while accessing certificate store"));
	}
	pktype.resize(_ncerts);
	isExpired.resize(_ncerts);
	superceded.resize(_ncerts);
	keyonly.resize(_ncerts);
	tqslTrace("CertTree::Build", "Issuer check, %d certs", _ncerts);
	// Separate certs into lists by issuer
	for (int i = 0; i < _ncerts; i++) {
		char issname[129];
		if (tqsl_getCertificateIssuerOrganization(_certs[i], issname, sizeof issname)) {
			displayTQSLError(__("Error parsing certificate for issuer"));
			return _ncerts;
		}
		char callsign[129] = "";
		if (tqsl_getCertificateCallSign(_certs[i], callsign, sizeof callsign - 4)) {
			displayTQSLError(__("Error parsing certificate for call sign"));
			return _ncerts;
		}
		strncat(callsign, " - ", sizeof callsign - strlen(callsign)-1);
		DXCC dxcc;
		int dxccEntity;
		if (tqsl_getCertificateDXCCEntity(_certs[i], &dxccEntity)) {
			displayTQSLError(__("Error parsing certificate for DXCC entity"));
			return _ncerts;
		}
		const char *entityName;
		if (dxcc.getByEntity(dxccEntity))
			entityName = dxcc.name();
		else
			entityName = "<UNKNOWN ENTITY>";
		strncat(callsign, entityName, sizeof callsign - strlen(callsign)-1);
		callsign[sizeof callsign-1] = 0;
		issuers[wxString::FromUTF8(issname)].push_back(make_pair(wxString::FromUTF8(callsign), i));
		pktype[i] = tqsl_getCertificatePrivateKeyType(_certs[i]);
		int tmp;
		tqsl_isCertificateExpired(_certs[i], &tmp);
		isExpired[i] = (tmp != 0);
		tqsl_isCertificateSuperceded(_certs[i], &tmp);
		superceded[i] = (tmp != 0);
		tqsl_getCertificateKeyOnly(_certs[i], &tmp);
		keyonly[i] = (tmp != 0);
	}
	// Sort each issuer's list and add items to tree
	issmap::iterator iss_it;
	wxTreeItemId id = NULL;
	wxTreeItemId valid = NULL;
	wxTreeItemId replaced = NULL;
	wxTreeItemId invalid = NULL;
	wxTreeItemId pending = NULL;
	wxTreeItemId expired = NULL;
	int invalidCnt = 0;
	int pendingCnt = 0;
	int replacedCnt = 0;
	int expiredCnt = 0;
	_nissuers = issuers.size();
	typedef map<wxString, int> komap;
	komap alreadyPended;
	komap goodCerts;			// Keep track of calls with good certificates

	tqslTrace("CertTree::Build", "Pass 1 - good cert filtering");
	// First pass, track good certs.
	for (iss_it = issuers.begin(); iss_it != issuers.end(); iss_it++) {
		certlist& list = iss_it->second;
		sort(list.begin(), list.end(), cl_cmp);
		for (int i = 0; i < static_cast<int>(list.size()); i++) {
			if (pktype[list[i].second] != TQSL_PK_TYPE_ERR && !keyonly[list[i].second] &&
				!superceded[list[i].second] && !isExpired[list[i].second]) {
				wxString callsign = wxString(list[i].first).BeforeFirst(' ');
				goodCerts[callsign] = 1;
				tqslTrace("CertTree::Build", "Good cert %s", S(callsign));
			}
		}
	}

	tqslTrace("CertTree::Build", "Pass 2");
	// Second pass, filter and populate the tree
	for (iss_it = issuers.begin(); iss_it != issuers.end(); iss_it++) {
		if (_nissuers > 1) {
			id = AppendItem(rootId, iss_it->first, FOLDER_ICON);
		}
		certlist& list = iss_it->second;
		sort(list.begin(), list.end(), cl_cmp);
		valid = AppendItem(_nissuers > 1 ? id : rootId, _("Active, usable certificates"), FOLDER_ICON);
		for (int i = 0; i < static_cast<int>(list.size()); i++) {
			wxString callsign = wxString(list[i].first).BeforeFirst(' ');
			CertTreeItemData *cert = new CertTreeItemData(_certs[list[i].second]);
			if (!cert) {
				tqslTrace("CertTree::Build", "Out of memory!");
				return 1;
			}
			int icon_type;
			if (pktype[list[i].second] == TQSL_PK_TYPE_ERR) {
				if (goodCerts.find(callsign) != goodCerts.end())
					continue;
				icon_type = BROKEN_ICON;
				if (!invalid)
					invalid = AppendItem(_nissuers > 1 ? id : rootId, _("Unusable: Missing Private Key"), FOLDER_ICON);
				AppendItem(invalid, list[i].first, icon_type, -1, cert);
				invalidCnt++;
			} else if (keyonly[list[i].second]) {
				icon_type = NOCERT_ICON;
				// Is a request pending for this call?
				wxString reqPending = wxConfig::Get()->Read(wxT("RequestPending"));
				wxString callsign = wxString(list[i].first).BeforeFirst(' ');

				wxStringTokenizer tkz(reqPending, wxT(","));
				while (tkz.HasMoreTokens()) {
					wxString pend = tkz.GetNextToken();
					if (pend == callsign) {
						// Only show once
						if (alreadyPended.find(callsign) == alreadyPended.end()) {
							if (!pending)
								pending = AppendItem(_nissuers > 1 ? id : rootId, _("Incomplete Certificates - requires a matching TQ6"), FOLDER_ICON);
							AppendItem(pending, list[i].first, icon_type, -1, cert);
							pendingCnt++;
							alreadyPended[callsign] = 1;
						}
						break;
					}
				}

			} else if (superceded[list[i].second]) {
				if (goodCerts.find(callsign) != goodCerts.end())
					continue;
				icon_type = REPLACED_ICON;
				if (!replaced)
					replaced = AppendItem(_nissuers > 1 ? id : rootId, _("Certificates replaced with a newer one"), FOLDER_ICON);
				AppendItem(replaced, list[i].first, icon_type, -1, cert);
				replacedCnt++;
			} else if (isExpired[list[i].second]) {
				if (goodCerts.find(callsign) != goodCerts.end())
					continue;
				icon_type = EXPIRED_ICON;
				if (!expired)
					expired = AppendItem(_nissuers > 1 ? id : rootId, _("Certificates that have expired"), FOLDER_ICON);
				AppendItem(expired, list[i].first, icon_type, -1, cert);
				expiredCnt++;
			} else {
				icon_type = CERT_ICON;
				AppendItem(valid, list[i].first, icon_type, -1, cert);
			}
		}
		if (id)
			Expand(id);
	}
	tqslTrace("CertTree::Build", "Done loading list");
	if (!valid)		// Handle the no certificates case
		valid = AppendItem(_nissuers > 1 ? id : rootId, _("Active, usable certificates"), FOLDER_ICON);
	Expand(valid);
	Expand(rootId);
	if (invalidCnt > 0) Expand(invalid);
	if (pendingCnt > 0) Expand(pending);
	if (replacedCnt > 0) Expand(replaced);
	if (expiredCnt > 0) Expand(expired);
	tqslTrace("CertTree::Build", "Done , %d certs", _ncerts);
	return _ncerts;
}

void
CertTree::SelectCert(tQSL_Cert cert) {
	long serial;
	if (tqsl_getCertificateSerial(cert, &serial))
		return;
	// Iterate the tree, looking for a matching certificate
	wxTreeItemId root = GetRootItem();
	wxTreeItemIdValue issCookie;
	wxTreeItemIdValue listsCookie;
	wxTreeItemIdValue certCookie;
	wxTreeItemId top;
	if (_nissuers > 1) {
		top = GetFirstChild(root, issCookie);
	} else {
		top = root;
	}
	while (top.IsOk()) {
		wxTreeItemId item = GetFirstChild(top, listsCookie);
		while (item.IsOk()) {
			wxTreeItemId subitem = GetFirstChild(item, certCookie);
			while (subitem.IsOk()) {
				tQSL_Cert cert = GetItemData(subitem)->getCert();
				long s;
				tqsl_getCertificateSerial(cert, &s);
				if (s == serial) {	// found it
					SelectItem(subitem);
					return;
				}
				subitem = GetNextChild(item, certCookie);
			}
			item = GetNextChild(top, listsCookie);
		}
		if (_nissuers > 1) {
			top = GetNextChild(root, issCookie);
		} else {
			break;
		}
	}
	return;		// Not found
}

void
CertTree::OnItemActivated(wxTreeEvent& event) {
	tqslTrace("CertTree::OnItemActivated", NULL);
	wxTreeItemId id = event.GetItem();
	displayCertProperties(reinterpret_cast<CertTreeItemData *>(GetItemData(id)), this);
}

void
CertTree::OnRightDown(wxMouseEvent& event) {
	tqslTrace("CertTree::OnRightDown", NULL);
	if (!useContextMenu)
		return;
	wxTreeItemId id = HitTest(event.GetPosition());
	if (id && GetItemData(id)) {
		SelectItem(id);
		tQSL_Cert cert = GetItemData(id)->getCert();
		int keyonly = 1;
		int superseded = 1;
		int renewable = 1;
		int enable = 1;
		wxMenu *cm;
		int window = DEFAULT_CERT_FUZZ;
		wxConfig::Get()->Read(wxT("RenewalWindow"), &window, DEFAULT_CERT_FUZZ);
		// Null cert sets the renewal window
		tqsl_isCertificateRenewable(NULL, &window);
		if (cert) {
			tqsl_getCertificateKeyOnly(cert, &keyonly);
			tqsl_isCertificateSuperceded(cert, &superseded);
			tqsl_isCertificateRenewable(cert, &renewable);
			if (!renewable || superseded) {
				enable = 0;
			}
			char callsign[129];
			if (tqsl_getCertificateCallSign(cert, callsign, sizeof callsign)) {
				cm = makeCertificateMenu((enable != 0), (keyonly != 0), NULL);
			} else {
				cm = makeCertificateMenu((enable != 0), (keyonly != 0), callsign);
			}
		} else {
			cm = makeCertificateMenu((enable != 0), (keyonly != 0), NULL);
		}
		PopupMenu(cm, event.GetPosition());
		delete cm;
	}
}

void
CertTree::SetTabTo(wxWindow *w) {
	tabTo = w;
}

void
CertTree::OnKeyDown(wxTreeEvent& event) {
	const wxKeyEvent& keyev = event.GetKeyEvent();
	long keycode = keyev.GetKeyCode();
	if (keycode == WXK_TAB) {
		if (tabTo) {
			tabTo->SetFocus();
			event.Skip();
		}
	}
}