/*
    * This file is part of Waarp Project (named also Waarp or GG).
    *
    *  Copyright (c) 2019, Waarp SAS, and individual contributors by the @author
    *  tags. See the COPYRIGHT.txt in the distribution for a full listing of
    * individual contributors.
    *
    *  All Waarp Project is free software: you can redistribute it and/or
    * modify it under the terms of the GNU General Public License as published by
   * the Free Software Foundation, either version 3 of the License, or (at your
   * option) any later version.
   *
   * Waarp is distributed in the hope that it will be useful, but WITHOUT ANY
   * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
   * A PARTICULAR PURPOSE. See the GNU General Public License for more details.
   *
   *  You should have received a copy of the GNU General Public License along with
   * Waarp . If not, see <http://www.gnu.org/licenses/>.
   */
  package org.waarp.openr66.protocol.networkhandler.ssl;
  
  import io.netty.channel.ChannelInitializer;
  import io.netty.channel.ChannelPipeline;
  import io.netty.channel.socket.SocketChannel;
  import io.netty.handler.ssl.SslHandler;
  import io.netty.handler.timeout.IdleStateHandler;
  import io.netty.handler.traffic.ChannelTrafficShapingHandler;
  import io.netty.handler.traffic.GlobalTrafficShapingHandler;
  import org.waarp.common.crypto.ssl.WaarpSecureKeyStore;
  import org.waarp.common.crypto.ssl.WaarpSslContextFactory;
  import org.waarp.common.logging.WaarpLogger;
  import org.waarp.common.logging.WaarpLoggerFactory;
  import org.waarp.openr66.protocol.configuration.Configuration;
  import org.waarp.openr66.protocol.exception.OpenR66ProtocolNetworkException;
  import org.waarp.openr66.protocol.networkhandler.NetworkServerInitializer;
  import org.waarp.openr66.protocol.networkhandler.packet.NetworkPacketCodec;
  
  import java.util.concurrent.TimeUnit;
  
  /**
   *
   */
  public class NetworkSslServerInitializer
      extends ChannelInitializer<SocketChannel> {
    /**
     * Internal Logger
     */
    private static final WaarpLogger logger =
        WaarpLoggerFactory.getLogger(NetworkSslServerInitializer.class);
    public static final String SSL_HANDLER = "ssl";
    protected final boolean isClient;
    private static WaarpSslContextFactory waarpSslContextFactory;
    private static WaarpSecureKeyStore waarpSecureKeyStore;
  
    /**
     * @param isClient True if this Factory is to be used in Client mode
     */
    public NetworkSslServerInitializer(final boolean isClient) {
      this.isClient = isClient;
    }
  
    @Override
    protected void initChannel(final SocketChannel ch) throws Exception {
      final ChannelPipeline pipeline = ch.pipeline();
      // Add SSL handler first to encrypt and decrypt everything.
      final SslHandler sslHandler;
      if (isClient) {
        // Not server: no clientAuthent, no renegotiation
        sslHandler = getWaarpSslContextFactory().createHandlerClient(ch);
      } else {
        // Server: no renegotiation still, but possible clientAuthent
        sslHandler = getWaarpSslContextFactory().createHandlerServer(
            getWaarpSslContextFactory().needClientAuthentication(), ch);
      }
      pipeline.addLast(SSL_HANDLER, sslHandler);
      logger.debug("Create IdleStateHandler with {} ms",
                   Configuration.configuration.getTimeoutCon());
  
      pipeline.addLast(NetworkServerInitializer.TIMEOUT,
                       new IdleStateHandler(true, 0, 0,
                                            Configuration.configuration.getTimeoutCon(),
                                            TimeUnit.MILLISECONDS));
  
      // Global limitation
      final GlobalTrafficShapingHandler handler =
          Configuration.configuration.getGlobalTrafficShapingHandler();
      if (handler == null) {
        throw new OpenR66ProtocolNetworkException(
            "Error at pipeline initialization," +
            " GlobalTrafficShapingHandler configured.");
      }
      pipeline.addLast(NetworkServerInitializer.LIMITGLOBAL, handler);
      // Per channel limitation
      pipeline.addLast(NetworkServerInitializer.LIMITCHANNEL,
                       new ChannelTrafficShapingHandler(
                           Configuration.configuration.getServerChannelWriteLimit(),
                           Configuration.configuration.getServerChannelReadLimit(),
                           Configuration.configuration.getDelayLimit(),
                           Configuration.configuration.getTimeoutCon()));
 
     pipeline.addLast(NetworkServerInitializer.NETWORK_CODEC,
                      new NetworkPacketCodec());
     pipeline.addLast(Configuration.configuration.getHandlerGroup(),
                      NetworkServerInitializer.NETWORK_HANDLER,
                      new NetworkSslServerHandler(!isClient));
   }
 
   /**
    * @return the waarpSslContextFactory
    */
   public static WaarpSslContextFactory getWaarpSslContextFactory() {
     return waarpSslContextFactory;
   }
 
   /**
    * @param waarpSslContextFactory the waarpSslContextFactory to set
    */
   public static void setWaarpSslContextFactory(
       final WaarpSslContextFactory waarpSslContextFactory) {
     NetworkSslServerInitializer.waarpSslContextFactory = waarpSslContextFactory;
   }
 
   /**
    * @return the waarpSecureKeyStore
    */
   public static WaarpSecureKeyStore getWaarpSecureKeyStore() {
     return waarpSecureKeyStore;
   }
 
   /**
    * @param waarpSecureKeyStore the waarpSecureKeyStore to set
    */
   public static void setWaarpSecureKeyStore(
       final WaarpSecureKeyStore waarpSecureKeyStore) {
     NetworkSslServerInitializer.waarpSecureKeyStore = waarpSecureKeyStore;
   }
 }