package jobs

/*
	Sliver Implant Framework
	Copyright (C) 2019  Bishop Fox

	This program is free software: you can redistribute it and/or modify
	it under the terms of the GNU General Public License as published by
	the Free Software Foundation, either version 3 of the License, or
	(at your option) any later version.

	This program is distributed in the hope that it will be useful,
	but WITHOUT ANY WARRANTY; without even the implied warranty of
	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
	GNU General Public License for more details.

	You should have received a copy of the GNU General Public License
	along with this program.  If not, see <https://www.gnu.org/licenses/>.
*/

import (
	"context"
	"crypto/tls"
	"fmt"
	"io/ioutil"
	"time"

	"github.com/spf13/cobra"

	"github.com/bishopfox/sliver/client/console"
	"github.com/bishopfox/sliver/protobuf/clientpb"
)

// HTTPSListenerCmd - Start an HTTPS listener
func HTTPSListenerCmd(cmd *cobra.Command, con *console.SliverConsoleClient, args []string) {
	domain, _ := cmd.Flags().GetString("domain")
	lhost, _ := cmd.Flags().GetString("lhost")
	lport, _ := cmd.Flags().GetUint32("lport")
	disableOTP, _ := cmd.Flags().GetBool("disable-otp")
	pollTimeout, _ := cmd.Flags().GetString("long-poll-timeout")
	pollJitter, _ := cmd.Flags().GetString("long-poll-jitter")
	website, _ := cmd.Flags().GetString("website")
	persistent, _ := cmd.Flags().GetBool("persistent")
	letsEncrypt, _ := cmd.Flags().GetBool("lets-encrypt")
	disableRandomize, _ := cmd.Flags().GetBool("disable-randomized-jarm")

	longPollTimeout, err := time.ParseDuration(pollTimeout)
	if err != nil {
		con.PrintErrorf("%s\n", err)
		return
	}
	longPollJitter, err := time.ParseDuration(pollJitter)
	if err != nil {
		con.PrintErrorf("%s\n", err)
		return
	}

	cert, key, err := getLocalCertificatePair(cmd)
	if err != nil {
		con.Println()
		con.PrintErrorf("Failed to load local certificate %s\n", err)
		return
	}

	con.PrintInfof("Starting HTTPS %s:%d listener ...\n", domain, lport)
	https, err := con.Rpc.StartHTTPSListener(context.Background(), &clientpb.HTTPListenerReq{
		Domain:          domain,
		Website:         website,
		Host:            lhost,
		Port:            lport,
		Secure:          true,
		Cert:            cert,
		Key:             key,
		ACME:            letsEncrypt,
		Persistent:      persistent,
		EnforceOTP:      !disableOTP,
		LongPollTimeout: int64(longPollTimeout),
		LongPollJitter:  int64(longPollJitter),
		RandomizeJARM:   !disableRandomize,
	})
	con.Println()
	if err != nil {
		con.PrintErrorf("%s\n", err)
	} else {
		con.PrintInfof("Successfully started job #%d\n", https.JobID)
	}
}

func getLocalCertificatePair(cmd *cobra.Command) ([]byte, []byte, error) {
	certPath, _ := cmd.Flags().GetString("cert")
	keyPath, _ := cmd.Flags().GetString("key")
	if certPath == "" && keyPath == "" {
		return nil, nil, nil
	}
	cert, err := ioutil.ReadFile(certPath)
	if err != nil {
		return nil, nil, err
	}
	key, err := ioutil.ReadFile(keyPath)
	if err != nil {
		return nil, nil, err
	}

	if _, err := tls.X509KeyPair(cert, key); err != nil {
		return nil, nil, fmt.Errorf("- could not parse cert or key (encrypted keys are not supported): %s", err.Error())
	}
	return cert, key, nil
}