/*
 *  Licensed to the Apache Software Foundation (ASF) under one or more
 *  contributor license agreements.  See the NOTICE file distributed with
 *  this work for additional information regarding copyright ownership.
 *  The ASF licenses this file to You under the Apache License, Version 2.0
 *  (the "License"); you may not use this file except in compliance with
 *  the License.  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 */
package org.apache.tomcat.util.net;

import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
import java.io.ObjectInputStream;
import java.io.ObjectOutputStream;
import java.util.List;

import org.junit.Assert;
import org.junit.Test;

import org.apache.tomcat.util.net.openssl.OpenSSLConf;
import org.apache.tomcat.util.net.openssl.OpenSSLConfCmd;
import org.apache.tomcat.util.net.openssl.ciphers.Cipher;

public class TestSSLHostConfig {

    @Test
    public void testCipher01() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c = Cipher.TLS_RSA_WITH_NULL_MD5;

        // Single JSSE name
        hc.setCiphers(c.getJsseNames().iterator().next());
        Assert.assertEquals(c.getOpenSSLAlias(), hc.getCiphers());

        // TLS 1.3 should be using defaults
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13, hc.getCipherSuites());
    }


    @Test
    public void testCipher02() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c1 = Cipher.TLS_RSA_WITH_NULL_MD5;
        Cipher c2 = Cipher.TLS_RSA_WITH_NULL_SHA;

        // Two JSSE names
        hc.setCiphers(c1.getJsseNames().iterator().next() + "," +
                c2.getJsseNames().iterator().next());
        Assert.assertEquals(c1.getOpenSSLAlias() + ":" + c2.getOpenSSLAlias(), hc.getCiphers());

        // TLS 1.3 should be using defaults
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13, hc.getCipherSuites());
    }


    @Test
    public void testCipher03() {
        SSLHostConfig hc = new SSLHostConfig();
        // Single OpenSSL alias
        hc.setCiphers("ALL");
        Assert.assertEquals("ALL", hc.getCiphers());

        // TLS 1.3 should be using defaults
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13, hc.getCipherSuites());
    }


    @Test
    public void testCipher04() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c = Cipher.TLS_RSA_WITH_NULL_MD5;

        // Single OpenSSLName name
        hc.setCiphers(c.getOpenSSLAlias());
        Assert.assertEquals(c.getOpenSSLAlias(), hc.getCiphers());

        // TLS 1.3 should be using defaults
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13, hc.getCipherSuites());
    }


    @Test
    public void testCipher05() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c = Cipher.TLS_AES_128_CCM_SHA256;

        // Single TLSv1.3 name - should be filtered out ...
        hc.setCiphers(c.getOpenSSLAlias());
        Assert.assertEquals("", hc.getCiphers());

        // ... and added to cipher suite list
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13 + ":" + c.getOpenSSLAlias(), hc.getCipherSuites());
    }


    @Test
    public void testCipher06() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c1 = Cipher.TLS_AES_128_CCM_SHA256;
        Cipher c2 = Cipher.TLS_RSA_WITH_NULL_MD5;

        // TLSv1.3 then TLSv1.2 - TLSv1.3 name should be filtered out ...
        hc.setCiphers(c1.getOpenSSLAlias() + ":" + c2.getOpenSSLAlias());
        Assert.assertEquals(c2.getOpenSSLAlias(), hc.getCiphers());

        // ... and added to cipher suite list
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13 + ":" + c1.getOpenSSLAlias(), hc.getCipherSuites());
    }


    @Test
    public void testCipher07() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c1 = Cipher.TLS_AES_128_CCM_SHA256;
        Cipher c2 = Cipher.TLS_RSA_WITH_NULL_MD5;

        // TLSv1.2 then TLSv1.3 - TLSv1.3 name should be filtered out ...
        hc.setCiphers(c2.getOpenSSLAlias() + ":" + c1.getOpenSSLAlias());
        Assert.assertEquals(c2.getOpenSSLAlias(), hc.getCiphers());

        // ... and added to cipher suite list
        Assert.assertEquals(SSLHostConfig.DEFAULT_TLS_CIPHERS_13 + ":" + c1.getOpenSSLAlias(), hc.getCipherSuites());
    }


    @Test
    public void testCiphersuite01() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c = Cipher.TLS_AES_128_CCM_SHA256;

        // Single TLSv1.3 cipher suite name
        hc.setCipherSuites(c.getOpenSSLAlias());
        Assert.assertEquals(c.getOpenSSLAlias(), hc.getCipherSuites());
    }


    @Test
    public void testCiphersuite02() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c1 = Cipher.TLS_AES_128_CCM_SHA256;
        Cipher c2 = Cipher.TLS_RSA_WITH_NULL_MD5;

        // TLSv1.3 then TLSv1.2 - TLSv1.2 name should be filtered out
        hc.setCipherSuites(c1.getOpenSSLAlias() + ":" + c2.getOpenSSLAlias());
        Assert.assertEquals(c1.getOpenSSLAlias(), hc.getCipherSuites());
    }


    @Test
    public void testCiphersuite03() {
        SSLHostConfig hc = new SSLHostConfig();
        Cipher c1 = Cipher.TLS_AES_128_CCM_SHA256;
        Cipher c2 = Cipher.TLS_RSA_WITH_NULL_MD5;

        // TLSv1.2 then TLSv1.3 - TLSv1.2 name should be filtered out
        hc.setCipherSuites(c2.getOpenSSLAlias() + ":" + c1.getOpenSSLAlias());
        Assert.assertEquals(c1.getOpenSSLAlias(), hc.getCipherSuites());
    }


    @Test
    public void testSerialization() throws IOException, ClassNotFoundException {
        // Dummy OpenSSL command name/value pair
        String name = "foo";
        String value = "bar";

        // Set up the object
        SSLHostConfig sslHostConfig = new SSLHostConfig();
        OpenSSLConf openSSLConf = new OpenSSLConf();
        OpenSSLConfCmd openSSLConfCmd = new OpenSSLConfCmd();
        openSSLConfCmd.setName(name);
        openSSLConfCmd.setValue(value);
        openSSLConf.addCmd(openSSLConfCmd);
        sslHostConfig.setOpenSslConf(openSSLConf);

        // Serialize
        ByteArrayOutputStream baos = new ByteArrayOutputStream();
        ObjectOutputStream oos = new ObjectOutputStream(baos);
        oos.writeObject(sslHostConfig);
        oos.close();

        // Deserialize
        ByteArrayInputStream bais = new ByteArrayInputStream(baos.toByteArray());
        ObjectInputStream ois = new ObjectInputStream(bais);
        SSLHostConfig output = (SSLHostConfig) ois.readObject();

        // Check values
        List<OpenSSLConfCmd> commands = output.getOpenSslConf().getCommands();
        Assert.assertEquals(1, commands.size());
        OpenSSLConfCmd command = commands.get(0);
        Assert.assertEquals(name, command.getName());
        Assert.assertEquals(value, command.getValue());
    }
}
