package com.code42;

import javax.net.ssl.KeyManager;
import javax.net.ssl.KeyManagerFactory;
import java.security.KeyStore;

import org.eclipse.jetty.util.ssl.SslContextFactory;
import org.eclipse.jetty.util.security.Password;

// https://github.com/eclipse/jetty.project/issues/2010#issuecomment-348259706

// public static class FIPSSslContextFactor extends SslContextFactory {
public class FIPSSslContextFactory extends SslContextFactory {
    private Password _keyStorePassword;
    private Password _keyManagerPassword;

    @Override
    public void setKeyStorePassword(String password)
    {
        super.setKeyStorePassword(password);
        if (password != null)
            _keyStorePassword = newPassword(password);
    }

    @Override
    public void setKeyManagerPassword(String password)
    {
        super.setKeyManagerPassword(password);
        if (password != null)
            _keyManagerPassword = newPassword(password);
    }

    @Override
    protected KeyManager[] getKeyManagers(KeyStore keyStore) throws Exception
    {
        KeyManager[] managers = null;

        if (keyStore != null)
        {
            KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(getKeyManagerFactoryAlgorithm());
            keyManagerFactory.init(keyStore, _keyManagerPassword == null ? (_keyStorePassword == null ? null : _keyStorePassword.toString().toCharArray()) : _keyManagerPassword.toString().toCharArray());
            managers = keyManagerFactory.getKeyManagers();
        }
        return managers;
    }
}