// Copyright (c) 2020, the Dart project authors.  Please see the AUTHORS file
// for details. All rights reserved. Use of this source code is governed by a
// BSD-style license that can be found in the LICENSE file.
//
// OtherResources=certificates/server_chain.pem
// OtherResources=certificates/server_key.pem
// OtherResources=certificates/trusted_certs.pem
// OtherResources=certificates/server_chain.p12
// OtherResources=certificates/server_key.p12
// OtherResources=certificates/trusted_certs.p12

import "package:async_helper/async_helper.dart";
import "package:expect/expect.dart";
import "package:path/path.dart";
import "dart:async";
import "dart:io";

String localFile(path) => Platform.script.resolve(path).toFilePath();

SecurityContext serverContext(String certType, String password) =>
    new SecurityContext()
      ..useCertificateChain(localFile('certificates/server_chain.$certType'),
          password: password)
      ..usePrivateKey(localFile('certificates/server_key.$certType'),
          password: password);

SecurityContext clientContext(String certType, String password) =>
    new SecurityContext()
      ..setTrustedCertificates(
          localFile('certificates/trusted_certs.$certType'),
          password: password);

Future<HttpServer> startServer(String certType, String password) {
  return HttpServer.bindSecure(
          "localhost", 0, serverContext(certType, password),
          backlog: 5)
      .then((server) {
    server.listen((HttpRequest request) {
      request.listen((_) {}, onDone: () {
        request.response.contentLength = 100;
        for (int i = 0; i < 10; i++) {
          request.response.add([0, 1, 2, 3, 4, 5, 6, 7, 8, 9]);
        }
        request.response.close();
      });
    });
    return server;
  });
}

Future test(String certType, String password) {
  List<int> body = <int>[];
  Completer completer = new Completer();
  startServer(certType, password).then((server) {
    try {
      SecureSocket.connect("localhost", server.port,
              context: clientContext(certType, 'junkjunk'))
          .then((socket) {
        socket.write("GET / HTTP/1.0\r\nHost: localhost\r\n\r\n");
        socket.close();
        socket.listen((List<int> data) {
          body.addAll(data);
        }, onDone: () {
          server.close();
          completer.complete(null);
        }, onError: (e, trace) {
          server.close();
          completer.complete(null);
        });
      });
    } catch (e) {
      Expect.isTrue(e is TlsException);
      var err = (e as TlsException).osError;
      Expect.isTrue(err is OSError);
      Expect.isTrue(err!.errorCode != 0);
      server.close();
      completer.complete(null);
    }
  });
  return completer.future;
}

main() async {
  asyncStart();
  await test('pem', 'dartdart');
  await test('p12', 'dartdart');
  asyncEnd();
}