/*
   BAREOS® - Backup Archiving REcovery Open Sourced

   Copyright (C) 2023-2026 Bareos GmbH & Co. KG

   This program is Free Software; you can redistribute it and/or
   modify it under the terms of version three of the GNU Affero General Public
   License as published by the Free Software Foundation and included
   in the file LICENSE.

   This program is distributed in the hope that it will be useful, but
   WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
   Affero General Public License for more details.

   You should have received a copy of the GNU Affero General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
   02110-1301, USA.
*/

#include "testing_dir_common.h"

#include "console/console_conf.h"
#include "console/console_globals.h"
#include "console/connect_to_director.h"
#include "dird/socket_server.h"

#include "lib/tls/openssl.h"
#include "lib/bsock.h"
#include "lib/bnet.h"
#include "lib/bstringlist.h"
#include "lib/watchdog.h"
#include "lib/bnet_server_tcp.h"
#include "tests/init_openssl.h"

#include "include/jcr.h"
#include <signal.h>

static void InitSignalHandler()
{
#if !defined(HAVE_WIN32)
  struct sigaction sig = {};
  sig.sa_handler = SIG_IGN;
  sigaction(SIGUSR2, &sig, nullptr);
  sigaction(SIGPIPE, &sig, nullptr);
#endif
}

static void InitGlobals()
{
  OSDependentInit();
#if HAVE_WIN32
  WSA_Init();
#endif
  directordaemon::my_config = nullptr;
  directordaemon::me = nullptr;
  console::my_config = nullptr;
  console::director_resource = nullptr;
  console::console_resource = nullptr;
  console::me = nullptr;
}

static PConfigParser ConsolePrepareResources(const char* console_configfile)
{
  PConfigParser console_config(
      console::InitConsConfig(console_configfile, M_INFO));
  console::my_config
      = console_config.get(); /* set the console global variable */

  EXPECT_NE(console_config.get(), nullptr);
  if (!console_config) { return nullptr; }

  bool parse_console_config_ok = console_config->ParseConfig();
  EXPECT_TRUE(parse_console_config_ok) << "Could not parse console config";
  if (!parse_console_config_ok) { return nullptr; }

  console::director_resource = dynamic_cast<console::DirectorResource*>(
      console_config->GetNextRes(console::R_DIRECTOR, NULL));
  EXPECT_NE(console::director_resource, nullptr);

  console::console_resource = dynamic_cast<console::ConsoleResource*>(
      console_config->GetNextRes(console::R_CONSOLE, NULL));
  console::my_config->own_resource_ = console::console_resource;
  EXPECT_EQ(console::console_resource, nullptr);  // no console resource present

  return console_config;
}

typedef std::unique_ptr<BareosSocket, std::function<void(BareosSocket*)>>
    PBareosSocket;

static PBareosSocket ConnectToDirector(JobControlRecord& jcr)
{
  BStringList args;
  uint32_t response_id = kMessageIdUnknown;

  PBareosSocket UA_sock(console::ConnectToDirector(jcr, 0, args, response_id),
                        [](BareosSocket* p) { delete p; });

  EXPECT_EQ(response_id, kMessageIdOk);

  EXPECT_NE(UA_sock.get(), nullptr);
  if (!UA_sock) { return nullptr; }
  return UA_sock;
}

template <typename F>
static bool do_connection_test(const char* path_to_config,
                               const char* console_config_path,
                               F&& testfn)
{
  debug_level = 10;  // set debug level high enough so we can see error messages
  InitSignalHandler();
  InitGlobals();

  PConfigParser console_config(ConsolePrepareResources(console_config_path));
  if (!console_config) { return false; }

  PConfigParser director_config(DirectorPrepareResources(path_to_config));
  if (!director_config) { return false; }

  {
    IPADDR* addr;
    foreach_dlist (addr, directordaemon::me->DIRaddrs) { addr->SetPortNet(0); }
  }

  auto bound_sockets = OpenAndBindSockets(directordaemon::me->DIRaddrs);

  EXPECT_NE(bound_sockets.size(), 0);

  if (bound_sockets.size() == 0) { return false; }

  // remember one fd
  auto sockfd = bound_sockets[0].fd;

  bool start_socket_server_ok
      = directordaemon::StartSocketServer(std::move(bound_sockets));

  EXPECT_TRUE(start_socket_server_ok);
  if (!start_socket_server_ok) { return false; }

  union {
    struct sockaddr addr;
    struct sockaddr_in addr4;
    struct sockaddr_in6 addr6;
  } buf = {};

  // the port gets chosen during StartSocketServer, so we need to query
  // the port number afterwards.
  socklen_t len = sizeof(buf);
  auto error = getsockname(sockfd, &buf.addr, &len);
  EXPECT_EQ(error, 0);
  if (error != 0) {
    perror("sock name error");
    return false;
  }

  EXPECT_TRUE(buf.addr.sa_family == AF_INET || buf.addr.sa_family == AF_INET6);
  if (buf.addr.sa_family != AF_INET && buf.addr.sa_family != AF_INET6) {
    return false;
  }

  auto nport = (buf.addr.sa_family == AF_INET) ? buf.addr4.sin_port
                                               : buf.addr6.sin6_port;

  auto port = ntohs(nport);

  JobControlRecord jcr;
  console::director_resource->DIRport = port;

  PBareosSocket UA_sock(ConnectToDirector(jcr));
  if (!UA_sock) { return false; }

  testfn(UA_sock.get());

  UA_sock->signal(BNET_TERMINATE);
  UA_sock->close();
  jcr.dir_bsock = nullptr;

  directordaemon::StopSocketServer();
  StopWatchdog();
  return true;
}

static void EnsureKtlsSend(BareosSocket* sock)
{
  EXPECT_TRUE(sock->tls_conn);
  if (!sock->tls_conn) { return; }
  EXPECT_TRUE(sock->tls_conn->KtlsSendStatus());
}

static void EnsureKtlsRecv(BareosSocket* sock)
{
  EXPECT_TRUE(sock->tls_conn);
  if (!sock->tls_conn) { return; }
  EXPECT_TRUE(sock->tls_conn->KtlsRecvStatus());
}

enum test
{
  test_v12_send,
  test_v12_recv,
  test_v13_send,
  test_v13_recv,
  test_v12_256_send,
  test_v13_256_send,
};

#if HAVE_LINUX_OS
bool IsTlsModuleLoaded()
{
  static bool warning_given = false;

  int res = system("lsmod | grep -w tls > /dev/null");

  if (res != 0 && !warning_given) {
    fprintf(stderr, "Could not detect loaded tls module. Skipping tests.\n");
    warning_given = true;
  }

  return (res == 0);
}
#endif

bool IsTestDisabled(test T)
{
#if HAVE_LINUX_OS
  if (!IsTlsModuleLoaded()) { return true; }
#endif

  switch (T) {
#if defined(DISABLE_KTLS_12_SEND)
    case test_v12_send: {
      return true;
    }
#endif
#if defined(DISABLE_KTLS_12_RECV)
    case test_v12_recv: {
      return true;
    }
#endif
#if defined(DISABLE_KTLS_13_SEND)
    case test_v13_send: {
      return true;
    }
#endif
#if defined(DISABLE_KTLS_13_RECV)
    case test_v13_recv: {
      return true;
    }
#endif
#if defined(DISABLE_KTLS_12_256_SEND)
    case test_v12_256_send: {
      return true;
    }
#endif
#if defined(DISABLE_KTLS_13_256_SEND)
    case test_v13_256_send: {
      return true;
    }
#endif

    default: {
      return false;
    }
  }
}

TEST(ktls, v12_send)
{
  if (IsTestDisabled(test_v12_send)) {
    GTEST_SKIP();
  } else {
    InitOpenSsl();
    do_connection_test("configs/ktls/bareos/", "configs/ktls/12/",
                       [](BareosSocket* sock) { EnsureKtlsSend(sock); });
  }
}

TEST(ktls, v12_recv)
{
  if (IsTestDisabled(test_v12_recv)) {
    GTEST_SKIP();
  } else {
    InitOpenSsl();
    do_connection_test("configs/ktls/bareos/", "configs/ktls/12/",
                       [](BareosSocket* sock) { EnsureKtlsRecv(sock); });
  }
}

TEST(ktls, v13_send)
{
  if (IsTestDisabled(test_v13_send)) {
    GTEST_SKIP();
  } else {
    InitOpenSsl();
    do_connection_test("configs/ktls/bareos/", "configs/ktls/13/",
                       [](BareosSocket* sock) { EnsureKtlsSend(sock); });
  }
}

TEST(ktls, v13_recv)
{
  if (IsTestDisabled(test_v13_recv)) {
    GTEST_SKIP();
  } else {
    InitOpenSsl();
    do_connection_test("configs/ktls/bareos/", "configs/ktls/13/",
                       [](BareosSocket* sock) { EnsureKtlsRecv(sock); });
  }
}

TEST(ktls, v12_256_send)
{
  if (IsTestDisabled(test_v12_256_send)) {
    GTEST_SKIP();
  } else {
    InitOpenSsl();
    do_connection_test("configs/ktls/bareos/", "configs/ktls/12-256/",
                       [](BareosSocket* sock) { EnsureKtlsSend(sock); });
  }
}

TEST(ktls, v13_256_send)
{
  if (IsTestDisabled(test_v13_256_send)) {
    GTEST_SKIP();
  } else {
    InitOpenSsl();
    do_connection_test("configs/ktls/bareos/", "configs/ktls/13-256/",
                       [](BareosSocket* sock) { EnsureKtlsSend(sock); });
  }
}
