package org.eparapher.core.crypto.keystore;
   
   import java.io.FileNotFoundException;
   import java.io.IOException;
   import java.security.KeyStore;
   import java.security.KeyStoreException;
   import java.security.NoSuchAlgorithmException;
   import java.security.ProviderException;
   import java.security.cert.CertificateException;
  
  import org.apache.log4j.Logger;
  import org.eparapher.core.EParapherManager;
  import org.eparapher.core.crypto.EPCryptoProviderManager;
  import org.eparapher.core.crypto.KeystoreEntry;
  import org.eparapher.core.crypto.keystore.smartcard.MyGUICallbackHandler;
  
  import sun.security.pkcs11.wrapper.PKCS11Exception;
  
  
  //http://java.sun.com/j2se/1.6.0/docs/guide/security/p11guide.html#P11Provider
  //http://www.ibm.com/developerworks/java/jdk/security/50/secguides/pkcs11implDocs/IBMJavaPKCS11ImplementationProvider.html#Initialize
  //FIXME : Ask PIN Code for Signing operation
  
  public class HardwareKeyStore extends GenericKeystore {
  
  	private static Logger log = Logger.getLogger(HardwareKeyStore.class);
  
  	protected KeyStore.Builder builder;
  	private MyGUICallbackHandler smartcardguipopups;
  	
  	//Flag that tell if Token is reachable through PKCS11
  	private boolean removed;
  	private boolean pkcs11BridgeLoaded;
  
  	public HardwareKeyStore() {
  		super();
  		pkcs11BridgeLoaded = EPCryptoProviderManager.InitPKCS11Provider();
  		smartcardguipopups = new MyGUICallbackHandler();
  		if (pkcs11BridgeLoaded)
  			builder =  KeyStore.Builder.newInstance(EPCryptoProviderManager.getKSImpl(), EPCryptoProviderManager.getPKCS11Provider(), new KeyStore.CallbackHandlerProtection(smartcardguipopups));
  		setRemoved(true);
  	}
  
  	public void getKeyStore(){
  		try {
  			if (builder==null)
  				return;
  			log.debug("PKCS11 -> Recuperation du keystore");
  			ks = builder.getKeyStore();
  			setRemoved(false);
  		} catch (KeyStoreException e) {
  			//EVENT : Smart Card not detected, Bad PIN, PIN Blocked, ...
  			fireMessage(e);
  		} catch (ProviderException pe) {
  			// EVENT : SmartCard has been removed
  			log.info("SmartCard has been removed",pe);
  			EParapherManager.getInstance().getUI().refreshCertificateList();
  		}
  	}
  
  	public boolean loadKeyStore() {
  		if (ks==null)
  			getKeyStore();
  		if (ks!=null) {
  			try {
  				ks.load(null,null);
  				//log.debug("SmartCard is Present");
  				this.loadPublicInformation();
  				this.loadedKeystore = true;
  				setRemoved(false);
  				return true;
  			} catch (NoSuchAlgorithmException nsae) {
  				log.error("PKCS11 Login failed : " + nsae.getMessage());
  			} catch (CertificateException ce) {
  				log.error("PKCS11 Login failed : " + ce.getMessage());
  			} catch (IOException ioe) {
  				log.debug("PKCS11 Keystore loading failed : " + ioe.getMessage(),ioe);
  				log.error("PKCS11 Keystore loading failed, try to rebuild the keystore.");
  				ks = null;
  			} catch (ProviderException pe) {
  				log.info( pe.getMessage());
  				ks = null;
  				setRemoved(true);
  			} catch (NullPointerException npe) {
  				log.debug("!!!Please Insert Your SmartCard!!! ",npe);
  				ks = null;
  			}
  		}
  		return false;		
  	}
  
  	private boolean validatePIN(String mpin) {
  		if (mpin==null || mpin.equals(""))
  			return false;
  		if (ks==null)
  			getKeyStore();
  		if (ks!=null) {
  			try {
  				ks.load(null,mpin.toCharArray());
 				return true;
 			} catch (NoSuchAlgorithmException nsae) {
 				log.error("PKCS11 Login failed : " + nsae.getMessage());
 			} catch (CertificateException ce) {
 				log.error("PKCS11 Login failed : " + ce.getMessage());
 			} catch (IOException ioe) {
 				log.error("PKCS11 Keystore loading failed, try to rebuild the keystore.");
 				log.debug("" + ioe.getMessage(),ioe);
 				ks = null;
 			} catch (ProviderException pe) {
 				log.debug("SmartCard has been removed : " + pe.getMessage());
 				ks = null;
 				setRemoved(true);
 			} catch (NullPointerException npe) {
 				log.debug("!!!Please Insert Your SmartCard!!! ",npe);
 				ks = null;
 			}
 		}
 		return false;
 	}
 
 	private void fireMessage(Exception e) {
 		Throwable PKCS11cause = e;
 		if (e!=null && e.getCause()!=null && e.getCause().getMessage().equals("PKCS11 not found")) {
 			log.debug("Please Insert Your SmartCard");
 			return;
 		}
 		while (PKCS11cause!=null && !(PKCS11cause instanceof PKCS11Exception))
 			PKCS11cause = PKCS11cause.getCause();
 		if (PKCS11cause!=null) {
 			String PKCS11_MSG = PKCS11cause.getMessage();
 			if (PKCS11_MSG.indexOf("CKR_PIN_LOCKED")>=0)
 				EParapherManager.getInstance().getUI().errorMessage("Your smartcard PIN is blocked!");
 			else if (PKCS11_MSG.indexOf("CKR_PIN_INCORRECT")>=0)
 				EParapherManager.getInstance().getUI().errorMessage("Your PIN is incorrect");
 			else if (PKCS11_MSG.indexOf("CKR_PIN_INVALID")>=0)
 				EParapherManager.getInstance().getUI().errorMessage("Your PIN is invalid");
 			else if (PKCS11_MSG.indexOf("CKR_TOKEN_NOT_PRESENT")>=0)
 				EParapherManager.getInstance().getUI().errorMessage("Card not detected");
 			else log.warn("Keystore error while accessing PKCS11 Token ",e);
 		} else log.warn("Keystore error while accessing PKCS11 Token ",e);
 	}
 	
 	public KeystoreEntry[] getKeystoreEntries() {
 		if (loadKeyStore())
 			return super.getKeystoreEntries();
 		else return null;
 	}
 
 	public boolean isRemoved() {
 		return removed;
 	}
 
 	public void setRemoved(boolean mremoved) {
 		if ( this.removed == true && mremoved==false ) 
 			log.info("SmartCard has been replugged");
 		this.removed = removed;
 	}
 	
 	public boolean loadPrivateKey() {
 		if (this.removed)
 			return false;
 		
 		return super.loadPrivateKey(null);
 	}
 
 	public boolean loadKeyStore(String secret) {
 		// Nothing to do here : managed by the callback handler
 		return true;
 	}
 
 	public boolean saveKeyStore() {
 		if (loadKeyStore()) {
 			try {
 				ks.store(null, null);
 				return true;
 			} catch (FileNotFoundException e) {
 				log.error("Error Saving Keystore on smartCard",e);
 			} catch (KeyStoreException e) {
 				log.error("Error Saving Keystore on smartCard",e);
 			} catch (NoSuchAlgorithmException e) {
 				log.error("Error Saving Keystore on smartCard",e);
 			} catch (CertificateException e) {
 				log.error("Error Saving Keystore on smartCard",e);
 			} catch (IOException e) {
 				log.error("Error Saving Keystore on smartCard",e);
 			}
 			return false;
 		}
 		return false;
 	}
 
 	public boolean isPkcs11BridgeLoaded() {
 		return pkcs11BridgeLoaded;
 	}
 
 	public boolean exists() {
 		if (!pkcs11BridgeLoaded)
 			EParapherManager.getInstance().getUI().showKeystoreSettings();
 		return true;
 	}
 
 	public boolean initialize() {
 		if (!pkcs11BridgeLoaded) {
 			EParapherManager.getInstance().getUI().warnMessage("Error while loading PKCS11 Bridge. Please check your PKCS11 configuration.");
 			EParapherManager.getInstance().getUI().showKeystoreSettings();
 		}
 		return true;
 	}
 }