/** Programa para La firma electrónica de archivos
* Desarrollado y Modificado por la Subsecretaría de Tecnologías de la Información
* de la Secretaría Nacional de la Administración Pública del Ecuador
* Firma Digital firmadigital.informatica.gob.ec
*------------------------------------------------------------------------------
* This program is free software: you can redistribute it and/or
modify
* it under the terms of the GNU Affero General Public License as
* published by the Free Software Foundation, either version 3 of the
* License, or (at your option) any later version.
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public
License
* along with this program. If not, see http://www.gnu.org/licenses. [^]
*------------------------------------------------------------------------------
**/
package com.fp.firma.keystore;

import java.io.ByteArrayInputStream;
import java.io.InputStream;
import java.lang.reflect.Constructor;
import java.lang.reflect.InvocationTargetException;
import java.security.AuthProvider;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.Provider;
import java.security.Security;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.security.auth.login.LoginException;

/**
 *  Esta clase se usa para obtener el keystore (Con el se pueden obtener luego los certificados dentro del token) en Windows
 */
public class WindowsJDK5KeyStoreProvider_SD implements KeyStoreProvider {

    //private static final byte[] PKCS11_CONFIG = "name = SmartCard\nlibrary = C:\\WINDOWS\\SYSTEM32\\DKCK201.DLL \ndisabledMechanisms = { CKM_SHA1_RSA_PKCS  }".getBytes();
    // esta linea corrige el error de la ubicación de Windows
    // para trabajar con iKey
    private static final String windowsDir_SD = "name = ePass3003\nlibrary = C:\\WINDOWS\\SYSTEM32\\SecurityDataCsp11_3003.dll \ndisabledMechanisms = { CKM_SHA1_RSA_PKCS  } \n\r showInfo = true";
    private static final byte[] PKCS11_CONFIG_SD = windowsDir_SD.getBytes();
    private static final String SUN_PKCS11_PROVIDER_CLASS = "sun.security.pkcs11.SunPKCS11";
    private AuthProvider aprov;

    /**
     *  <code> getKeystore </code>
     *  Esta funcion se utiliza para obtener el keystore de java para manejar luego la clave privada y los certificados dentro del token
     * @param password   Se pasa la clave del token
     * @return
     * @throws java.security.KeyStoreException
     */
    @Override
    public KeyStore getKeystore(char[] password) throws KeyStoreException {
        try {
            // empieza intentando con eToken
            InputStream configStream = new ByteArrayInputStream(PKCS11_CONFIG_SD);

            Provider sunPKCS11Provider = this.createSunPKCS11Provider(configStream);
            Security.addProvider(sunPKCS11Provider);


            KeyStore.Builder ksBuilder = KeyStore.Builder.newInstance(
                    "PKCS11",
                    null,
                    new KeyStore.CallbackHandlerProtection(new SimpleCallbackHandler(null, password))); //cmdLineHdlr

            KeyStore ks = ksBuilder.getKeyStore();

            // Estas lineas se añadieron para controlar mejor el logout del token
            aprov = (AuthProvider) Security.getProvider(sunPKCS11Provider.getName());
            aprov.setCallbackHandler(new SimpleCallbackHandler(null, password)); //cmdLineHdlr

            try {
                aprov.login(null, null);
            } catch (LoginException ex) {
                Logger.getLogger(WindowsJDK5KeyStoreProvider_SD.class.getName()).log(Level.SEVERE, null, ex);
                throw new LoginException( /*ex*/);
            }




            return ks;  //keyStore
        } catch (LoginException ex) {
            Logger.getLogger(WindowsJDK5KeyStoreProvider_SD.class.getName()).log(Level.SEVERE, null, ex);
            System.out.println("error en el loginExcep" + ex);
        } catch (KeyStoreException e) {
            System.out.println("e:" + e.getCause().toString().length());
            throw new KeyStoreException(e);
        }

//                } catch (Exception e){
//                    System.out.println("Error en el keystore:"  + e);
//                    throw new KeyStoreException(e);
//                }
        return null;
    }

    /**
     * <code> logout </code>
     *  Esta función permite limpiar de memoria el keystore.
     * @throws javax.security.auth.login.LoginException
     */
    public void logout() throws LoginException {

        this.aprov.logout();
    }

    /**
     * Instancia la clase <code>sun.security.pkcs11.SunPKCS11</code>
     * dinamicamente, usando Java Reflection.
     *
     * @return una instancia de <code>sun.security.pkcs11.SunPKCS11</code>
     */
    @SuppressWarnings("unchecked")
    private Provider createSunPKCS11Provider(InputStream configStream) throws KeyStoreException {
        try {
            Class sunPkcs11Class = Class.forName(SUN_PKCS11_PROVIDER_CLASS);
            Constructor pkcs11Constr = sunPkcs11Class.getConstructor(InputStream.class);
            Provider pkcs11Provider = (Provider) pkcs11Constr.newInstance(configStream);

            return pkcs11Provider;
        } catch (ClassNotFoundException e) {
            throw new KeyStoreException(e);
        } catch (NoSuchMethodException e) {
            throw new KeyStoreException(e);
        } catch (InvocationTargetException e) {
            throw new KeyStoreException(e);
        } catch (IllegalAccessException e) {
            throw new KeyStoreException(e);
        } catch (InstantiationException e) {
            throw new KeyStoreException(e);
        }
    }
}