/*
 * Copyright ConsenSys AG.
 *
 * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with
 * the License. You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
 * an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations under the License.
 *
 * SPDX-License-Identifier: Apache-2.0
 */

package org.hyperledger.besu.consensus.qbft.pki;

import static com.google.common.base.Preconditions.checkNotNull;

import org.hyperledger.besu.pki.config.PkiKeyStoreConfiguration;
import org.hyperledger.besu.pki.keystore.KeyStoreWrapper;

import com.google.common.annotations.VisibleForTesting;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/** The Pki block creation configuration provider. */
public class PkiBlockCreationConfigurationProvider {

  private static final Logger LOG =
      LoggerFactory.getLogger(PkiBlockCreationConfigurationProvider.class);

  private final KeyStoreWrapperProvider keyStoreWrapperProvider;

  /** Instantiates a new Pki block creation configuration provider. */
  public PkiBlockCreationConfigurationProvider() {
    this(new DefaultKeyStoreWrapperProvider());
  }

  /**
   * Instantiates a new Pki block creation configuration provider.
   *
   * @param keyStoreWrapperProvider the key store wrapper provider
   */
  @VisibleForTesting
  PkiBlockCreationConfigurationProvider(final KeyStoreWrapperProvider keyStoreWrapperProvider) {
    this.keyStoreWrapperProvider = checkNotNull(keyStoreWrapperProvider);
  }

  /**
   * Load pki block creation configuration.
   *
   * @param pkiKeyStoreConfiguration the pki key store configuration
   * @return the pki block creation configuration
   */
  public PkiBlockCreationConfiguration load(
      final PkiKeyStoreConfiguration pkiKeyStoreConfiguration) {
    KeyStoreWrapper keyStore;
    try {
      keyStore =
          keyStoreWrapperProvider.apply(
              pkiKeyStoreConfiguration.getKeyStoreType(),
              pkiKeyStoreConfiguration.getKeyStorePath(),
              pkiKeyStoreConfiguration.getKeyStorePassword(),
              null);
      LOG.info("Loaded PKI Block Creation KeyStore {}", pkiKeyStoreConfiguration.getKeyStorePath());
    } catch (Exception e) {
      throw new IllegalStateException("Error loading PKI Block Creation KeyStore", e);
    }

    KeyStoreWrapper trustStore;
    try {
      trustStore =
          keyStoreWrapperProvider.apply(
              pkiKeyStoreConfiguration.getTrustStoreType(),
              pkiKeyStoreConfiguration.getTrustStorePath(),
              pkiKeyStoreConfiguration.getTrustStorePassword(),
              pkiKeyStoreConfiguration.getCrlFilePath().orElse(null));
      LOG.info(
          "Loaded PKI Block Creation TrustStore {}", pkiKeyStoreConfiguration.getTrustStorePath());
    } catch (Exception e) {
      throw new IllegalStateException("Error loading PKI Block Creation TrustStore", e);
    }

    return new PkiBlockCreationConfiguration(
        keyStore, trustStore, pkiKeyStoreConfiguration.getCertificateAlias());
  }
}
