/*

 * Copyright (c) 2018, Oracle and/or its affiliates. All rights reserved.

 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

 *

 * This code is free software; you can redistribute it and/or modify it

 * under the terms of the GNU General Public License version 2 only, as

 * published by the Free Software Foundation.

 *

 * This code is distributed in the hope that it will be useful, but WITHOUT

 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

 * version 2 for more details (a copy is included in the LICENSE file that

 * accompanied this code).

 *

 * You should have received a copy of the GNU General Public License version

 * 2 along with this work; if not, write to the Free Software Foundation,

 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

 *

 * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

 * or visit www.oracle.com if you need additional information or have any

 * questions.

 */

import java.net.URI;

import java.net.http.HttpClient;

import java.net.http.HttpClient.Version;

import java.net.http.HttpResponse.BodyHandler;

import static java.net.http.HttpResponse.BodyHandler.asString;

import java.net.http.HttpRequest;

import java.net.http.HttpResponse;

import javax.net.ssl.SSLContext;

import javax.net.ssl.SSLParameters;

/*

 * @test

 * @build Server CertificateTest

 * @run main/othervm CertificateTest good

 * @run main/othervm CertificateTest bad

 */

/**

 * The test runs twice. In both cases it uses a valid self-signed certificate

 * that is installed in the trust store (so is trusted) and the same cert is supplied

 * by the server for its own identity. Two servers on two different ports are used

 * on the remote end.

 *

 * For the "good" run the cert contains the correct hostname of the target server

 * and therefore should be accepted by the cert checking code in the client.

 * For the "bad" run, the cert contains an invalid hostname, and should be rejected.

 */

public class CertificateTest {

    static SSLContext ctx;

    static SSLParameters params;

    static boolean good;

    static String trustStoreProp;

    static String suffix;

    static Server server;

    static int port;

    static String TESTSRC = System.getProperty("test.src");

    public static void main(String[] args) throws Exception

    {

        try {

            if (args[0].equals("good")) {

                good = true;

                trustStoreProp = TESTSRC + "/good.keystore";

            } else {

                good = false;

                trustStoreProp = TESTSRC + "/bad.keystore";

            }

            server = new Server(trustStoreProp);

            port = server.getPort();

            System.setProperty("javax.net.ssl.trustStore", trustStoreProp);

            System.setProperty("javax.net.ssl.trustStorePassword", "passphrase");

            init();

            test(args);

        } finally {

            server.stop();

        }

    }

    static void init() throws Exception

    {

        ctx = SSLContext.getDefault();

        params = ctx.getDefaultSSLParameters();

        //params.setProtocols(new String[] { "TLSv1.2" });

    }

    static void test(String[] args) throws Exception

    {

        String uri_s = "https://127.0.0.1:" + Integer.toString(port) + "/foo";

        String error = null;

        Exception exception = null;

        System.out.println("Making request to " + uri_s);

        HttpClient client = HttpClient.newBuilder()

                .sslContext(ctx)

                .sslParameters(params)

                .build();

        HttpRequest request = HttpRequest.newBuilder(new URI(uri_s))

                .version(HttpClient.Version.HTTP_1_1)

                .GET()

                .build();

        try {

            HttpResponse<String> response = client.send(request, asString());

            System.out.printf("Status code %d received\n", response.statusCode());

            if (good && response.statusCode() != 200)

                error = "Test failed: good: status should be 200";

            else if (!good)

                error = "Test failed: bad: status should not be 200";

        } catch (Exception e) {

            System.err.println("Exception good = " + good);

            exception = e;

            if (good)

                error = "Test failed: good: got exception";

        }

        if (error != null)

            throw new RuntimeException(error, exception);

    }

}