#!/bin/bash

. $(dirname $0)/settings.sh

print_help() {
    cat <<EOH
Usage: $0 [-i] [-t] [-c] [-h] [REQEUST...]

  -i       Print the id of the request, too.
  -c       
  -h       Show this message.

  REQUEST  Only display the specified request. You could specify
           a request id, a FQDN or a hostname. If you only supply
           a hostname, ".spline.inf.fu-berlin.de" is added
           automatically.

EOH
}

select_string() {
    local cond=$1; shift
    [[ "$cond" -ne 0 ]] && echo -n "$1" || echo -n "$2"
}

ID=0
CRON=0
while getopts :itch FLAG; do
    case "$FLAG" in
        i)
            ID=1
            ;;
        c)
            CRON=1
            ;;
        h)
            print_help
            exit
            ;;
        *)
            echo "Unknown option: -$OPTARG"
            print_help
            exit 1
            ;;
    esac
done
shift $((OPTIND-1))

declare -a OUTPUT
while read serial; do
    dir="$(dirname "$serial")"
    host="$(basename "$dir")"
    basename="$(basename "$serial" .serial)"
    id="$(cat "$serial")"

    [[ -f "$REPO/SSL/$host/$basename.crt" ]] && continue
    [[ -f "/var/cache/spline-ssl/$basename.crt" ]] && continue

    for REQUEST in "$@"; do
        [[ -n "$REQUEST" ]] || continue

        if [[ -n "${REQUEST%%*[!0-9]*}" ]]; then
            [[ "$REQUEST" == "$id" ]] || continue 2
        else
            if [[ "$REQUEST" == "${REQUEST%.de}" ]]; then
                REQUEST="$REQUEST.spline.inf.fu-berlin.de"
            fi

            [[ "$REQUEST" == "$host" ]] || continue 2
        fi
    done

    if [[ ${#OUTPUT[@]} -eq 0 ]]; then
        OUTPUT+=("$(select_string "$ID" "Antrag Host Fingerprint" "Host Fingerprint")")
    fi

    OUTPUT+=("$(
        select_string "$ID" "$id $host " "$host "

        pubkey "$dir/$basename.key" "$dir/$basename.passphrase" | \
            sha1sum - | \
            perl -ne 's/([a-f0-9]{2})(?! *-$)/\1:/g;s/ *-$//; print uc'
    )")
done < <(find "$REPO/SSL/private/" -name '*.serial')

[[ ${#OUTPUT[@]} -gt 0 ]] || exit 0

TABLE="$(
    printf "%s\n%s\n" "${OUTPUT[@]:0:1}" "$(printf "%s\n" "${OUTPUT[@]:1}" | sort)" |
    column -t |
    awk '{
        gsub(/ [^ ]/, "|&", $0)
        a[NR]=$0

        if (length>x) x=length
    }
    END {
        if (x==0) exit 0
        fstr="| %-"x"s |"

        header=sprintf(fstr, a[1]);  print header
        gsub(/[^|\n]/, "-", header); print header
        for(i=2;i<=NR;i++) printf(fstr"\n", a[i])
    }'
)"


if [[ "$CRON" -eq 0 ]]; then
    echo "$TABLE"
else
    /usr/sbin/sendmail -t <<EOM
To: ra@spline.de
Subject: Neue Zertifikatsantraege gefunden
Content-Type: text/plain; charset="utf-8"

Hallo,

es wurden neue Zertifikatsanträge gefunden:

$TABLE

Diese Nachricht wird täglich verschickt bis die Zertifikate ausgestellt
wurden. Sobald die Zertifikate verfügbar sind, werden sie innerhalb
der nächsten Stunde automatisch auf den Servern installiert.

Gruß,
bcfg2
EOM
fi