/*
    * This file is part of Waarp Project (named also Waarp or GG).
    *
    *  Copyright (c) 2019, Waarp SAS, and individual contributors by the @author
    *  tags. See the COPYRIGHT.txt in the distribution for a full listing of
    * individual contributors.
    *
    *  All Waarp Project is free software: you can redistribute it and/or
    * modify it under the terms of the GNU General Public License as published by
   * the Free Software Foundation, either version 3 of the License, or (at your
   * option) any later version.
   *
   * Waarp is distributed in the hope that it will be useful, but WITHOUT ANY
   * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
   * A PARTICULAR PURPOSE. See the GNU General Public License for more details.
   *
   *  You should have received a copy of the GNU General Public License along with
   * Waarp . If not, see <http://www.gnu.org/licenses/>.
   */
  package org.waarp.common.crypto.ssl;
  
  import org.waarp.common.exception.CryptoException;
  
  import javax.net.ssl.ManagerFactoryParameters;
  import javax.net.ssl.TrustManager;
  import javax.net.ssl.TrustManagerFactory;
  import javax.net.ssl.TrustManagerFactorySpi;
  import java.security.KeyStore;
  import java.security.cert.X509Certificate;
  
  /**
   * A SecureTrustManagerFactory
   */
  public class WaarpSecureTrustManagerFactory extends TrustManagerFactorySpi {
    private final WaarpX509TrustManager ggTrustManager;
  
    private final TrustManager[] trustManager;
  
    private final boolean needAuthentication;
    private final boolean hasTrustStore;
  
    /**
     * Accept all connections
     */
    public WaarpSecureTrustManagerFactory() {
      ggTrustManager = new WaarpX509TrustManager();
      trustManager = new TrustManager[] { ggTrustManager };
      needAuthentication = false;
      hasTrustStore = false;
    }
  
    /**
     * @param tmf
     * @param clientAuthent True if the TrustStore is used for Client
     *     Authentication
     *
     * @throws CryptoException
     */
    public WaarpSecureTrustManagerFactory(final TrustManagerFactory tmf,
                                          final boolean clientAuthent)
        throws CryptoException {
      ggTrustManager = new WaarpX509TrustManager(tmf);
      trustManager = new TrustManager[] { ggTrustManager };
      needAuthentication = clientAuthent;
      hasTrustStore = true;
    }
  
    /**
     * @return True if this TrustManager really check authentication
     */
    public final boolean hasTrustStore() {
      return hasTrustStore;
    }
  
    /**
     * @return True if this TrustManager really check authentication
     */
    public final boolean needAuthentication() {
      return needAuthentication;
    }
  
    /**
     * @return the list of TrustManagers
     */
    public final X509Certificate[] getX509Certificates() {
      return ((WaarpX509TrustManager) trustManager[0]).getAcceptedIssuers();
    }
  
    /**
     * @return The TrustManager arrays
     */
    public final TrustManager[] getTrustManagers() {
      return trustManager.clone();
    }
  
    @Override
    protected final TrustManager[] engineGetTrustManagers() {
      return getTrustManagers();
    }
 
   @Override
   protected final void engineInit(final KeyStore arg0) {
     // Unused
   }
 
   @Override
   protected final void engineInit(final ManagerFactoryParameters arg0) {
     // Unused
   }
 
 }