#!/usr/bin/env bash

set -euo pipefail

if [ -z "$BASH" ] ; then
   bash  "$0"
   exit
fi

file_name=$0


main() {
  setup_environment
  show_info "$INIT_INFO"
  if ! ask "$INIT_CONFIRMATION" "$CONTINUE" 1 ; then exit; fi

  if [ -z "${XDG_CONFIG_HOME:-}" ] ; then
    CAT_PATH="$HOME/.config"
  else
    CAT_PATH="$XDG_CONFIG_HOME"
  fi

  printf -v CAT_DIR_EXISTS "$CAT_DIR_EXISTS" "$CAT_PATH"

  if [ -d "$CAT_PATH/cat_installer" ] ; then
    if ! ask "$CAT_DIR_EXISTS" "$CONTINUE" 1 ; then exit; fi
  else
    mkdir "$CAT_PATH/cat_installer"
    log "Directory $CAT_PATH/cat_installer created."
  fi

  echo "$CA_CERTIFICATE" > "$CAT_PATH/cat_installer/ca.pem"
  log "Write $CAT_PATH/cat_installer/ca.pem"


  if [ -z "$USERNAME" -a -z "$PASSWORD" ] ; then
    get_user_credentials
  fi
  if nmcli_add_connection ; then
    # nmcli --ask connection up eduroam
    show_info "$INSTALLATION_FINISHED"
  else
    show_info "$SAVE_WPA_CONF"
    if ! ask "$SAVE_WPA_CONF" 1 ; then exit ; fi

  if [ -f "$CAT_PATH/cat_installer/cat_installer.conf" ] ; then
    printf -v CONF_FILE_EXITS "$CONF_FILE_EXITS" "$CAT_PATH"
    if ! ask "$CONF_FILE_EXITS" "$CONTINUE" 1 ; then confirm_exit; fi
    rm "$CAT_PATH/cat_installer/cat_installer.conf"
    log "$CAT_PATH/cat_installer/cat_installer.conf removed."
  fi
    create_wpa_conf
    show_info "$INSTALLATION_FINISHED"
    log "Installation successful."
  fi
}

function setup_environment {
  bf=""
  n=""
  ZENITY=""
  KDIALOG=""
  YAD=""
  TTY=""
  if [ ! -z "${DISPLAY:-}" ] ; then
    if which zenity 1>/dev/null 2>&1 ; then
      ZENITY=$(which zenity)
      log "$ZENITY detected."
    elif which kdialog 1>/dev/null 2>&1 ; then
      KDIALOG=$(which kdialog)
      log "$KDIALOG detected."
    elif which yad 1>/dev/null 2>&1 ; then
      YAD=$(which yad)
      log "$YAD detected."
    else
      if tty > /dev/null 2>&1 ; then
        if  echo "$TERM" | grep -E -q "xterm|gnome-terminal|lxterminal"  ; then
          bf=" ";
          n=" ";
        fi
      else
        find_xterm
        if [ -n "$XT" ] ; then
          $XT -e "$file_name"
        fi
      fi
    fi
  else
    TTY=1
  fi
}

function split_line {
  echo "$1" | awk  -F '\\\\n' 'END {  for(i=1; i <= NF; i++) print $i }'
}

function find_xterm {
  terms="xterm aterm wterm lxterminal rxvt gnome-terminal konsole"
  for terminal in $terms; do
    if which "$terminal" > /dev/null 2>&1 ; then
      XT="$terminal"
      log "$XT detected."
      break
    fi
  done
}

function ask {
  if [ ! -z "$silent" ] ; then
    return 0
  fi
  if [ ! -z "$KDIALOG" ] ; then
     if "$KDIALOG" --yesno "${1}\n${2}" --title "$TITLE" ; then
       return 0
     else
       return 1
     fi
  fi
  if [ ! -z "$ZENITY" ] ; then
     text=$(echo "${1}" | fmt -w60)
     if "$ZENITY" --no-wrap --question --text="${text}\n${2}" --title="$TITLE" 2>/dev/null ; then
       return 0
     else
       return 1
     fi
  fi
  if [ ! -z "$YAD" ] ; then
     text=$(echo "${1}" | fmt -w60)
     if "$YAD" --image="dialog-question" --button=gtk-yes:0 --button=gtk-no:1 --width=500 --wrap --text="${text}\n\n${2}" --title="$TITLE" 2>/dev/null ; then
       return 0
     else
       return 1
     fi
  fi

  yes1=${YES^^}
  no1=${NO^^}

  if [ "$3" == "0" ]; then
    def="$YES"
  else
    def="$NO"
  fi

  echo "";
  while true
  do
  split_line "$1"
  read -r -p "${bf}$2 ${YES}/${NO}? [${def}]:$n " answer
  if [ -z "$answer" ] ; then
    answer=${def^^}
  fi
  answer=${answer^^}
  case "$answer" in
    ${yes1})
       return 0
       ;;
    ${no1})
       return 1
       ;;
  esac
  done
}

function alert {
  if [ ! -z "$silent" ] ; then
    echo "$1"
    return
  fi
  if [ ! -z "$KDIALOG" ] ; then
     "$KDIALOG" --sorry "${1}"
     return
  fi
  if [ ! -z "$ZENITY" ] ; then
     "$ZENITY" --warning --text="$1" 2>/dev/null
     return
  fi
  if [ ! -z "$YAD" ] ; then
     "$YAD" --text="$1" 2>/dev/null
     return
  fi
  echo "$1"

}

function show_info {
  if [ ! -z "$silent" ] ; then
    echo "$1"
    return
  fi
  if [ ! -z "$KDIALOG" ] ; then
     "$KDIALOG" --msgbox "${1}"
     return
  fi
  if [ ! -z "$ZENITY" ] ; then
     "$ZENITY" --info --width=500 --text="$1" 2>/dev/null
     return
  fi
  if [ ! -z "$YAD" ] ; then
     "$YAD" --button=OK --width=500 --wrap --text="$1" 2>/dev/null
     return
  fi
  split_line "$1"
}

function confirm_exit {
  if [ ! -z "$silent" ] ; then
    echo "$QUIT"
    exit 1
  fi
  if ! ask "$QUIT" 1 ; then exit ; fi
  ask "$QUIT"
}

function prompt_nonempty_string {
  prompt=$2
  H=""
  D=""
  if [ ! -z "$ZENITY" ] ; then
    if [ "$1" -eq 0 ] ; then
     H="--hide-text "
    fi
    if ! [ -z "${3:-}" ] ; then
     D="--entry-text=$3"
    fi
  elif [ ! -z "$KDIALOG" ] ; then
    if [ "$1" -eq 0 ] ; then
     H="--password"
    else
     H="--inputbox"
    fi
  elif [ ! -z "$YAD" ] ; then
    if [ "$1" -eq 0 ] ; then
     H=":H"
    fi
    if ! [ -z "${3:-}" ] ; then
     D="--entry-text=$3"
    fi
  else
   if [ "$1" -eq 0 ] ; then
     H="-s"
    else
     H=""
    fi
  fi

  out_s="";
  if [ ! -z "$silent" ] ; then
    if [ "$1" -eq 0 ] ; then
      out_s="$USERNAME"
    elif [ "$1" -eq 1 ] ; then
      out_s="$PASSWORD"
    fi
    confirm_exit
  fi

  if [ ! -z "$ZENITY" ] ; then
    while [ ! "$out_s" ] ; do
      out_s=$($ZENITY --entry --width=300 $H "$D" --text "$prompt" 2>/dev/null)
      if [ $? -ne 0 ] ; then
        confirm_exit
      fi
    done
  elif [ ! -z "$KDIALOG" ] ; then
    while [ ! "$out_s" ] ; do
      out_s=$($KDIALOG $H "$prompt" "$3")
      if [ $? -ne 0 ] ; then
        confirm_exit
      fi
    done
  elif [ ! -z "$YAD" ] ; then
    while [ ! "$out_s" ] ; do
      out_s=$($YAD --form --width=300 --field=$H --text "$prompt" "$D" 2>/dev/null)
      if [ $? -ne 0 ] ; then
        confirm_exit
      fi
      out_s=${out_s%|}
    done
  else
    while [ -z "$out_s" ] ; do
      read $H -p "${prompt}: " out_s
    done
  fi
  echo "$out_s";
}

function get_user_credentials {
  if [ "$EAP_OUTER" = "PEAP" -o "$EAP_OUTER" = "TTLS" ] ; then
    get_username_password
  fi
  if [ "$EAP_OUTER" = "TLS" ] ; then
    get_p12_credentials
  fi
}

function get_username_password {
  PASSWORD="a"
  PASSWORD1="b"

  if ! USERNAME=$(prompt_nonempty_string 1 "$USERNAME_PROMPT") ; then
    exit 1
  else
    while validate_username ; do
      USERNAME=$(prompt_nonempty_string 1 "$USERNAME_PROMPT")
    done
    log "Username entered."
  fi

  while [ "$PASSWORD" != "$PASSWORD1" ] ; do
    if ! PASSWORD=$(prompt_nonempty_string 0 "$ENTER_PASSWORD") ; then
      exit 1
    fi
    if [ ! -z "$TTY" ] ; then
       echo ""
    fi
    if ! PASSWORD1=$(prompt_nonempty_string 0 "$ENTER_PASSWORD") ; then
      exit 1
    fi
    if [ ! -z "$TTY" ] ; then
       echo ""
    fi
    if [ "$PASSWORD" != "$PASSWORD1" ] ; then
      alert "$PASSWORD_DIFFER"
    fi
  done
  log "Password entered."
}

function validate_username {
  log "validate username"
  if [ -z "$USERNAME" ] ; then
    log "Empty username"
    return 0
  fi
  if [[ "$USERNAME" =~ "@" ]] ; then
    log "\$USERNAME contains character '@' ($USERNAME)."
    username_length="${#USERNAME}"
    t="${USERNAME%%@*}"
    t="${#t}"
    at_position="$((t + 1))"
    if [ "$at_position" -le "$username_length" ] ; then
      log "Username length: $username_length, @ position: $at_position ($USERNAME)"
      EMAIL_REGEX="([0-9a-zA-Z]+)@([0-9a-zA-Z]+)"
      if [[ "$USERNAME" =~ $EMAIL_REGEX ]] ; then
        log "\$USERNAME match regex ($USERNAME)."
        realm="${BASH_REMATCH[2]}"
        if [ "$VERIFY_USER_REALM_INPUT" = true ] ; then
          if [ "$realm" = "$USER_REALM" ] ; then
            log "User realm input is equal to \$USER_REALM ($USERNAME)."
            return 1
          else
            log "User realm input is uneqal to \$USER_REALM ($USERNAME)."
            alert "$WRONG_REALM_SUFFIX"
            return 0
          fi
        else
          log "\$VERIFY_USER_REAM_INPUT is false. Realm possibly correct."
        fi
      else
        log "Username not valid ($USERNAME)."
        alert "$WRONG_REALM_SUFFIX"
        return 0
      fi
    else
      if [ "$VERIFY_USER_REALM_INPUT" = true ] ; then
        log "No realm exists, but $USER_REALM expected."
        alert "$WRONG_REALM"
        return 0
      fi
    fi
  else
    if [ "$VERIFY_USER_REALM_INPUT" = true ] ; then
      log "The realm is missing ($USERNAME)."
      alert "$WRONG_USERNAME_FORMAT"
      return 0
    else
      log "No realm exists, but possibly correct."
      return 1
    fi
  fi
  return 1
}

function get_p12_credentials {
  if [ "$EAP_INNER" = "SILVERBULLET" ] ; then
    save_sb_pfx
  else
    if [ ! -z "$silent" ] ; then
      if [ ! -z "$PFX_FILE" ] ; then
        alert "PFX is missning." # TODO
        exit 1
      fi
    else
      select_p12_file
      if cp "$PFX_FILE" "$CAT_PATH/cat_installer/user.p12" ; then
        log "File user.p12 is written."
      else
        log "Couldn't write p12 file."
        exit 1
      fi
    fi
  fi

  if [ ! -z "$silent" ] ; then
    if process_p12 ; then
      exit 1
    fi
  else
    while [ -z "$PASSWORD" ] ; do
      if ! PASSWORD=$(prompt_nonempty_string 0 "$ENTER_PASSWORD") ; then
        alert "$ENTER_IMPORT_PASSWORD"
      fi
      if ! process_p12 ; then
        alert "$INCORRECT_PASSWORD"
        continue
      fi
      if [ -z "${USERNAME}" ] ; then
         while validate_username ; do
            USERNAME=$(prompt_nonempty_string 1 "$USERNAME_PROMPT")
         done
      fi
    done
  fi
}

function process_p12 {
  if [ -n "$USE_OTHER_TLS_ID" ] ; then
    exit 0
  fi

  if which libressl 1>/dev/null 2>&1 ; then
      SSL_LIBRARY=libressl
  elif which openssl 1>/dev/null 2>&1 ; then
      SSL_LIBRARY=openssl
  else
    log "No ssl library found."
  fi
  log "Found $SSL_LIBRARY."
  output="$($SSL_LIBRARY pkcs12 -in "$PFX_FILE" -passin pass:$PASSWORD -nokeys -clcerts 2>/dev/null)"
  if [ "$?" != 0 ] ; then
    log "SSL library command failed (Error code $?)."
    PASSWORD=""
    return 1
  fi
  declare -A certificate_property
  readarray -t lines <<< "$output"
  for line in "${lines[@]}" ; do
     if [[ "$line" =~ subject=* ]] ; then
        ln=${line/subject=/}
        IFS=','
        for rdn in ${ln// /}; do
           IFS='='
           read -ra rn <<< "$rdn"
           key=${rn[0],,}
           value=${rn[1],,}
           certificate_property["$key"]="$value"
        done
     fi
  done
  if [ ! -z "${certificate_property['cn']+x}" ] ; then
     if [[ "${certificate_property['cn']}" =~ @ ]] ; then
        USERNAME="${certificate_property['cn']}"
        log "Using cn: ${certificate_property['cn']}"
        return 0
     fi 
  fi 
  if [ ! -z "${certificate_property['emailaddress']+x}" ] ; then
     if [[ "${certificate_property['emailaddress']}" =~ @ ]] ; then
        log "Using emailaddress: $certificate_property['emailaddress']"
        USERNAME="${certificate_property['emailaddress']}"
        return 0
     fi 
  fi

  USERNAME=""
  alert "Unable to extract username from the certificate." # TODO
  return 0
}

function select_p12_file {
  if [ ! -z "$ZENITY" ] ; then
    certificate_output=$($ZENITY --file-selection --file-filter="$P12_FILTER | *.p12 *.P12 *.pfx *.PFX" --file-filter="$ALL_FILTER | *" --title=$P12_TITLE)
    if [ "$?" != 0 ] ; then
      log " Choose pfx file failed (Error code: $?)."
      exit 1
    fi
  elif [ ! -z "$KDIALOG" ] ; then
    certificate_output=$($KDIALOG --getopenfilename . "*.p12 *.P12 *.pfx *.PFX | $P12_FILTER" --title=$P12_TITLE)
    if [ "$?" != 0 ] ; then
      log " Choose pfx file failed (Error code: $?)."
      exit 1
    fi

  else
    certificate_output="$(find . -type f \( -name '*.p12' -or -name '*.P12' -or -name '*.pfx' -or -name '*.PFX' \))"
    if [ "$?" != 0 ] ; then
      log " Choose pfx file failed (Error code: $?)."
      exit 1
    fi
    # TODO
  fi

  PFX_FILE="$(echo $certificate_output | xargs | iconv -t utf8)"
}

function save_sb_fx {
  CERTIFICATE_FILE="CAT_PATH/cat_installer/user.p12"
  echo "$SB_USER_FILE" > "$CERTIFICATE_FILE"
}

function nmcli_add_connection {
  interface=$(get_wlan_interface)
  log "WLAN device $interface found."

  for ssid in "${SSIDS[@]}"; do
    log "Try to add connection for $ssid."
    log "Adding $EAP_OUTER configuration"
    log "Testing for existing connections"
    cons=$(nmcli -t  -f UUID,NAME con show | egrep ":${ssid}$" | awk -F ':' '{print $1}')
    readarray -t AAA <<< $cons
    for uuid in "${AAA[@]}" ; do
       if [ ! -z "$uuid" ] ; then
          nmcli connection delete $uuid >/dev/null 2>&1
          log "Removing $uuid"
       fi
    done

    if [ "$EAP_OUTER" = "TLS" ] ; then
       nmcli connection add type wifi con-name "$ssid" ifname "$interface" ssid "$ssid" -- \
       wifi-sec.key-mgmt wpa-eap 802-1x.eap "$EAP_OUTER" \
       802-1x.altsubject-matches "$ALTSUBJECT_MATCHES" \
       802-1x.ca-cert "$CAT_PATH/cat_installer/ca.pem" 802-1x.identity "$USERNAME" connection.permissions "$USER" \
       802-1x.private-key "$CAT_PATH/cat_installer/user.p12" \
       802-1x.private-key-password "$PASSWORD" \
       802-11-wireless-security.proto rsn 802-11-wireless-security.group "ccmp,tkip" \
       802-11-wireless-security.pairwise ccmp >/dev/null 2>&1
    else
       nmcli connection add type wifi con-name "$ssid" ifname "$interface" ssid "$ssid" -- \
       wifi-sec.key-mgmt wpa-eap 802-1x.eap "$EAP_OUTER" 802-1x.phase2-auth "$EAP_INNER" \
       802-1x.altsubject-matches "$ALTSUBJECT_MATCHES" 802-1x.anonymous-identity "$ANONYMOUS_IDENTITY" \
       802-1x.ca-cert "$CAT_PATH/cat_installer/ca.pem" 802-1x.identity "$USERNAME" connection.permissions "$USER" \
       802-1x.password "$PASSWORD" \
       802-11-wireless-security.proto rsn 802-11-wireless-security.group "ccmp,tkip" \
       802-11-wireless-security.pairwise ccmp >/dev/null 2>&1
    fi
    log "Add $ssid connection with nmcli successful."
  done
}

function get_wlan_interface {
  device=$(echo /sys/class/net/*/wireless | awk -F"/" "{ print \$5 }")
  echo "$device"
  return 0
}

function create_wpa_conf {
  if [ "$EAP_INNER" == "MSCHAPV2" ] ; then
    if which openssl 1>/dev/null 2>&1 ; then
      PASSWORD=$(echo -n "$PASSWORD" | iconv -t utf16le | openssl md4)
      PASSWORD=hash:${PASSWORD#*= }
    fi
  fi

  cat << EOFW >> $HOME/.config/cat_installer/cat_installer.conf

network={
  ssid="eduroam"
  key_mgmt=WPA-EAP
  pairwise=CCMP
  group=CCMP TKIP
  eap="${EAP_OUTER}"
  ca_cert="$CAT_PATH/cat_installer/ca.pem"
  identity="${USERNAME}"
  domain_suffix_match="${ALTSUBJECT_MATCHES}"
  phase2="auth=${EAP_INNER}"
  password="${PASSWORD}"
  anonymous_identity="${ANONYMOUS_IDENTITY}"
}
EOFW
  log "Write $HOME/.config/cat_installer/cat_installer.conf."
  chmod 600 "$CAT_PATH/cat_installer/cat_installer.conf"
}

function log {
  if ! [ -z "$debug" ] ; then
    echo "[${USER}][$(date)] - ${*}" >&2
  fi
}

function usage() {
    echo "usage: eduroam_linux installer [[[--debug]] | [--help]]"
}

debug=
silent=
username=
password=
verbose=
USERNAME=""
PASSWORD=""
PFX_FILE=""
while (( "$#" )); do
    case $1 in
        -d | --debug )          debug=1
                                ;;
        -s | --silent )         silent=1
                                ;;
        -u | --username )       shift
                                USERNAME=$1
                                ;;
        -p | --password )       shift
                                PASSWORD=$1
                                ;;
        -f | --pfxfile )        shift
                                PFX_FILE=$1
                                ;;
        -v | --verbose )        verbose=1
                                ;;
        -h | --help )           usage
                                exit
                                ;;
        * )                     usage
                                exit 1
    esac
    shift
done

if [ ! -z "$silent" ] ; then
  missing_parameter=false
  if [ -z "${USERNAME+x}" ] ; then
    echo "Parameter --username is missing."
    missing_parameter=true
  fi
  if [ -z "${PASSWORD+x}" ] ; then
    echo "Parameter --password is missing."
    missing_parameter=true
  fi
  if [ "$missing_parameter" = true ] ; then
    exit 1
  fi
fi

if ! [ -z "$verbose" ] ; then
  set -x
fi



QUIT="Really quit?"
USERNAME_PROMPT="enter your userid"
ENTER_PASSWORD="enter password"
ENTER_IMPORT_PASSWORD="enter your import password"
INCORRECT_PASSWORD="incorrect password"
REPEAT_PASSWORD="repeat your password"
PASSWORD_DIFFER="passwords do not match"
INSTALLATION_FINISHED="Installation successful"
CAT_DIR_EXISTS="Directory %s exists; some of its files may be overwritten."
CONTINUE="Continue?"
NM_NOT_SUPPORTED="This NetworkManager version is not supported"
CERT_ERROR="Certificate file not found, looks like a CAT error"
UNKNOWN_VERSION="Unknown version"
DBUS_ERROR="DBus connection problem, a sudo might help"
YES="Y"
NO="N"
P12_FILTER="personal certificate file (p12 or pfx)"
ALL_FILTER="All files"
P12_TITLE="personal certificate file (p12 or pfx)"
SAVE_WPA_CONF="NetworkManager configuration failed, but we may generate a wpa_supplicant configuration file if you wish. Be warned that your connection password will be saved in this file as clear text."
SAVE_WPA_CONFIRM="Write the file"
WRONG_USERNAME_FORMAT="Error: Your username must be of the form 'xxx@institutionID' e.g. 'john@example.net'!"
WRONG_REALM="Error: your username must be in the form of 'xxx@%s'. Please enter the username in the correct format."
WRONG_REALM_SUFFIX="Error: your username must be in the form of 'xxx@institutionID' and end with '%s'. Please enter the username in the correct format."
USER_CERT_MISSING="personal certificate file not found"
ORGANISATION="Technical University of Sofia, Plovdiv Branch"
PROFILE_NAME="ICT Department"
URL="your local eduroam® support page"
EMAIL="support@tu-plovdiv.bg"
TITLE="eduroam CAT"
SERVER_MATCH="radius.tu-plovdiv.bg"
EAP_OUTER="TTLS"
EAP_INNER="PAP"
INIT_INFO_TMP="This installer has been prepared for %s\n\nMore information and comments:\n\nE-Mail: %s\nWWW: %s\n\nInstaller created with software from the GEANT project."
INIT_CONFIRMATION_TMP="This installer will only work properly if you are a member of %s."
USER_REALM="tu-plovdiv.bg"
SSIDS=('eduroam')
DEL_SSIDS=()
ALTSUBJECT_MATCHES=('DNS:radius.tu-plovdiv.bg')
USE_OTHER_TLS_ID=
ANONYMOUS_IDENTITY="anonymous@tu-plovdiv.bg"
VERIFY_USER_REALM_INPUT=
TOU=""
CA_CERTIFICATE="-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
"
printf -v INIT_INFO "$INIT_INFO_TMP" "$ORGANISATION" "$EMAIL" "$URL"
printf -v INIT_CONFIRMATION "$INIT_CONFIRMATION_TMP" "$ORGANISATION"

main "$@"; exit