// Copyright Joyent, Inc. and other Node contributors.
//
// Permission is hereby granted, free of charge, to any person obtaining a
// copy of this software and associated documentation files (the
// "Software"), to deal in the Software without restriction, including
// without limitation the rights to use, copy, modify, merge, publish,
// distribute, sublicense, and/or sell copies of the Software, and to permit
// persons to whom the Software is furnished to do so, subject to the
// following conditions:
//
// The above copyright notice and this permission notice shall be included
// in all copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
// USE OR OTHER DEALINGS IN THE SOFTWARE.


var common = require('../common');
var assert = require('assert');

var net = require('net');
var fs = require('fs');

var tests_run = 0;

function tlsTest(port, host, caPem, keyPem, certPem) {
  var N = 50;
  var count = 0;
  var sent_final_ping = false;

  var server = net.createServer(function(socket) {
    assert.equal(true, socket.remoteAddress !== null);
    assert.equal(true, socket.remoteAddress !== undefined);
    if (host === '127.0.0.1')
      assert.equal(socket.remoteAddress, '127.0.0.1');
    else if (host == null)
      assert.equal(socket.remoteAddress, '127.0.0.1');

    socket.setEncoding('utf8');
    socket.setNoDelay();
    socket.timeout = 0;

    socket.on('data', function(data) {
      var verified = socket.verifyPeer();
      var peerDN = socket.getPeerCertificate('DNstring');
      assert.equal(verified, 1);
      assert.equal(peerDN,
                   'C=UK,ST=Acknack Ltd,L=Rhys Jones,O=node.js,' +
                   'OU=Test TLS Certificate,CN=localhost');
      console.log('server got: ' + JSON.stringify(data));
      assert.equal('open', socket.readyState);
      assert.equal(true, count <= N);
      if (/PING/.exec(data)) {
        socket.write('PONG');
      }
    });

    socket.on('end', function() {
      assert.equal('writeOnly', socket.readyState);
      socket.end();
    });

    socket.on('close', function(had_error) {
      assert.equal(false, had_error);
      assert.equal('closed', socket.readyState);
      socket.server.close();
    });
  });

  server.setSecure('X509_PEM', caPem, 0, keyPem, certPem);
  server.listen(port, host);

  var client = net.createConnection(port, host);

  client.setEncoding('utf8');
  client.setSecure('X509_PEM', caPem, 0, keyPem, caPem);

  client.on('connect', function() {
    assert.equal('open', client.readyState);
    var verified = client.verifyPeer();
    var peerDN = client.getPeerCertificate('DNstring');
    assert.equal(verified, 1);
    assert.equal(peerDN,
                 'C=UK,ST=Acknack Ltd,L=Rhys Jones,O=node.js,' +
                 'OU=Test TLS Certificate,CN=localhost');
    client.write('PING');
  });

  client.on('data', function(data) {
    assert.equal('PONG', data);
    count += 1;

    console.log('client got PONG');

    if (sent_final_ping) {
      assert.equal('readOnly', client.readyState);
      return;
    } else {
      assert.equal('open', client.readyState);
    }

    if (count < N) {
      client.write('PING');
    } else {
      sent_final_ping = true;
      client.write('PING');
      client.end();
    }
  });

  client.on('close', function() {
    assert.equal(N + 1, count);
    assert.equal(true, sent_final_ping);
    tests_run += 1;
  });
}


var have_tls;
try {
  var dummy_server = net.createServer();
  dummy_server.setSecure();
  have_tls = true;
} catch (e) {
  have_tls = false;
}

if (have_tls) {
  var caPem = fs.readFileSync(common.fixturesDir + '/test_ca.pem');
  var certPem = fs.readFileSync(common.fixturesDir + '/test_cert.pem');
  var keyPem = fs.readFileSync(common.fixturesDir + '/test_key.pem');

  /* All are run at once, so run on different ports */
  tlsTest(common.PORT, 'localhost', caPem, keyPem, certPem);
  tlsTest(common.PORT + 1, null, caPem, keyPem, certPem);

  process.on('exit', function() {
    assert.equal(2, tests_run);
  });
} else {
  console.log('Not compiled with TLS support -- skipping test');
  process.exit(0);
}