// Copyright (c) 2020, the Dart project authors.  Please see the AUTHORS file
// for details. All rights reserved. Use of this source code is governed by a
// BSD-style license that can be found in the LICENSE file.
//
// OtherResources=certificates/server_chain.pem
// OtherResources=certificates/server_key.pem
// OtherResources=certificates/trusted_certs.pem
// OtherResources=certificates/server_chain.p12
// OtherResources=certificates/server_key.p12
// OtherResources=certificates/trusted_certs.p12

import "package:expect/async_helper.dart";
import "package:expect/expect.dart";
import "package:path/path.dart";
import "dart:async";
import "dart:io";

String localFile(path) => Platform.script.resolve(path).toFilePath();

SecurityContext serverContext(String certType, String password) =>
    new SecurityContext()
      ..useCertificateChain(
        localFile('certificates/server_chain.$certType'),
        password: password,
      )
      ..usePrivateKey(
        localFile('certificates/server_key.$certType'),
        password: password,
      );

SecurityContext clientContext(String certType, String password) =>
    new SecurityContext()..setTrustedCertificates(
      localFile('certificates/trusted_certs.$certType'),
      password: password,
    );

Future<HttpServer> startServer(String certType, String password) {
  return HttpServer.bindSecure(
    "localhost",
    0,
    serverContext(certType, password),
    backlog: 5,
  ).then((server) {
    server.listen((HttpRequest request) {
      request.listen(
        (_) {},
        onDone: () {
          request.response.contentLength = 100;
          for (int i = 0; i < 10; i++) {
            request.response.add([0, 1, 2, 3, 4, 5, 6, 7, 8, 9]);
          }
          request.response.close();
        },
      );
    });
    return server;
  });
}

Future test(String certType, String password) {
  List<int> body = <int>[];
  Completer completer = new Completer();
  startServer(certType, password).then((server) {
    try {
      SecureSocket.connect(
        "localhost",
        server.port,
        context: clientContext(certType, 'junkjunk'),
      ).then((socket) {
        socket.write("GET / HTTP/1.0\r\nHost: localhost\r\n\r\n");
        socket.close();
        socket.listen(
          (List<int> data) {
            body.addAll(data);
          },
          onDone: () {
            server.close();
            completer.complete(null);
          },
          onError: (e, trace) {
            server.close();
            completer.complete(null);
          },
        );
      });
    } catch (e) {
      Expect.isTrue(e is TlsException);
      var err = (e as TlsException).osError;
      Expect.isTrue(err is OSError);
      Expect.isTrue(err!.errorCode != 0);
      server.close();
      completer.complete(null);
    }
  });
  return completer.future;
}

main() async {
  asyncStart();
  await test('pem', 'dartdart');
  await test('p12', 'dartdart');
  asyncEnd();
}