#!/bin/sh

testname=${0#$srcdir/}

if test -z "$MH_OBJ_DIR"; then
    srcdir=`dirname "$0"`/../..
    MH_OBJ_DIR=`cd "$srcdir" && pwd`; export MH_OBJ_DIR
fi

. "$MH_OBJ_DIR/test/common.sh"

if [ $(uname) != FreeBSD ]; then
    test_skip 'imap/test-login only working on FreeBSD for now'
fi

# common.sh sets this to something crazy; did i do that?!
testname=${0#$srcdir/}

imap_cleanup() {
    #### Save exit status to use as status for this program.
    status=$?
    set +e

    rm -f "$imapd" "$actual"
    [ -n "$imapd_pid" ] && kill $imapd_pid

    # TODO have cleanup allow additional cleanup registration?
    #  Or just allow it to accept status as argument.
    (exit $status)
    cleanup
}
trap imap_cleanup 0

covdir="$MH_OBJ_DIR/covdata/${MH_COVERAGE_PROFILE:-default}/$testname"
install -d "$covdir"

cat > "$MH_TEST_DIR/netrc" <<EOF
machine 127.0.0.1 login testuser password password
EOF

actual="$MH_TEST_DIR/$$.actual"

imapd="$MH_TEST_DIR/$$.imapd"

arith_val=0

start() {
    rm -f "$MH_TEST_DIR/$profile/imap.d/socket"
    status=0
    LLVM_PROFILE_FILE="$covdir/$profile-%m.profraw" "$MH_OBJ_DIR/target/debug/mhimap" imap start > "$actual" 2>&1 || status=$?
}

################################################################################
# Tests with nothing even listening.

start_test 'connection refused, explicit TLS'

arith_eval $arith_val + 1
setup_test_without_data profile$arith_val
trap imap_cleanup 0

cat >> "$MH" <<EOF
credentials: file-nopermcheck:$MH_TEST_DIR/netrc
Managed-Folders: imap
imap-log-level: error
imap-log-error-to: $MH_TEST_DIR/error
imap-manager: $MH_OBJ_DIR/target/debug/imap-folder-manager
imap-socket: $MH_TEST_DIR/$profile/imap.d/socket
imap-db: $MH_TEST_DIR/$profile/imap.d
imap-host: 127.0.0.1
imap-mailbox-root: test/
imap-port: 255
imap-tls: explicit but don't verify the cert i already did out of band
imap-auth: SASL
imap-user: testuser
EOF
if [ -n "$MH_TEST_IMAP_LOG_LEVEL" ]; then
    echo "imap-log-level: $MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
    echo "imap-log-$MH_TEST_IMAP_LOG_LEVEL-to: $MH_TEST_DIR/$profile/imap.d/log.$MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
fi

start
if ! grep -q 'Connection to "127.0.0.1:255" failed: Connection refused' "$actual"; then
    cat "$actual" >&2
    fail 'ECONN not reported'
fi

# Use fakeinetd for tests of the parts of explicit TLS handling before TLS negotiation.
start_fakeinetd "$imapd"
imapd_pid=$fakeinetd_pid

arith_eval $arith_val + 1
setup_test_without_data profile$arith_val
trap imap_cleanup 0

cat >> "$MH" <<EOF
credentials: file-nopermcheck:$MH_TEST_DIR/netrc
Managed-Folders: imap
imap-log-level: error
imap-log-error-to: $MH_TEST_DIR/error
imap-manager: $MH_OBJ_DIR/target/debug/imap-folder-manager
imap-socket: $MH_TEST_DIR/$profile/imap.d/socket
imap-db: $MH_TEST_DIR/$profile/imap.d
imap-host: 127.0.0.1
imap-mailbox-root: test/
imap-port: $fakeinetd_port
imap-tls: explicit but don't verify the cert i already did out of band
imap-auth: SASL
imap-user: testuser
EOF
if [ -n "$MH_TEST_IMAP_LOG_LEVEL" ]; then
    echo "imap-log-level: $MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
    echo "imap-log-$MH_TEST_IMAP_LOG_LEVEL-to: $MH_TEST_DIR/$profile/imap.d/log.$MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
fi

################################################################################
start_test 'rudely close pre-greeting, explicit TLS'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
exit 1
EOSCRIPT
chmod 755 "$imapd"

start
if ! grep -q 'Received EOF on network read' "$actual"; then
    cat "$actual" >&2
    fail 'EOF error not reported'
fi

################################################################################
start_test 'protocol violation in greeting, explicit TLS'

# Greets with simply "trash\r\n".

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
trash
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q 'protocol error:  no space in response' "$actual"; then
    cat "$actual" >&2
    fail 'protocol error not reported'
fi

################################################################################
start_test 'STARTTLS capability not offered'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK [CAPABILITY IMAP4REV1 AUTH=PLAIN UIDPLUS]
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q "server doesn't offer STARTTLS" "$actual"; then
    cat "$actual" >&2
    fail 'missing STARTTLS not reported'
fi

################################################################################
start_test 'STARTTLS capability not offered after capabilities requested'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK greeting
1 OK [CAPABILITY IMAP4REV1 AUTH=PLAIN UIDPLUS] CAPABILITY response
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q "server doesn't offer STARTTLS" "$actual"; then
    cat "$actual" >&2
    fail 'missing STARTTLS not reported'
fi

################################################################################
start_test 'rudely closed after STARTTLS'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK [CAPABILITY IMAP4REV1 STARTTLS] greeting
EOF
read line
EOSCRIPT

start
if ! grep -q 'Received EOF on network read' "$actual"; then
    cat "$actual" >&2
    fail 'EOF not reported'
fi

################################################################################
start_test 'trash response to STARTTLS'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK [CAPABILITY IMAP4REV1 STARTTLS] greeting
trash
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q 'protocol error:  no space in response' "$actual"; then
    cat "$actual" >&2
    fail 'protocol error not reported'
fi

kill $imapd_pid
imapd_pid=

################################################################################
start_test 'connection refused, implicit TLS'

arith_eval $arith_val + 1
setup_test_without_data profile$arith_val
trap imap_cleanup 0

cat >> "$MH" <<EOF
credentials: file-nopermcheck:$MH_TEST_DIR/netrc
Managed-Folders: imap
imap-log-level: error
imap-log-error-to: $MH_TEST_DIR/error
imap-manager: $MH_OBJ_DIR/target/debug/imap-folder-manager
imap-socket: $MH_TEST_DIR/$profile/imap.d/socket
imap-db: $MH_TEST_DIR/$profile/imap.d
imap-host: 127.0.0.1
imap-mailbox-root: test/
imap-port: 255
imap-tls: implicit but don't verify the cert i already did out of band
imap-auth: SASL
imap-user: testuser
EOF
if [ -n "$MH_TEST_IMAP_LOG_LEVEL" ]; then
    echo "imap-log-level: $MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
    echo "imap-log-$MH_TEST_IMAP_LOG_LEVEL-to: $MH_TEST_DIR/$profile/imap.d/log.$MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
fi

start
if ! grep -q 'Connection to "127.0.0.1:255" failed: Connection refused' "$actual"; then
    cat "$actual" >&2
    fail 'ECONN not reported'
fi

################################################################################
# Start the server for the rest.

start_stunnel imap "$imapd"

arith_eval $arith_val + 1
setup_test_without_data profile$arith_val
trap imap_cleanup 0

cat >> "$MH" <<EOF
credentials: file-nopermcheck:$MH_TEST_DIR/netrc
Managed-Folders: imap
imap-log-level: error
imap-log-error-to: $MH_TEST_DIR/error
imap-manager: $MH_OBJ_DIR/target/debug/imap-folder-manager
imap-socket: $MH_TEST_DIR/$profile/imap.d/socket
imap-db: $MH_TEST_DIR/$profile/imap.d
imap-host: 127.0.0.1
imap-mailbox-root: test/
imap-port: $fakeinetd_port
imap-tls: implicit but don't verify the cert i already did out of band
imap-auth: SASL
imap-user: testuser
EOF
if [ -n "$MH_TEST_IMAP_LOG_LEVEL" ]; then
    echo "imap-log-level: $MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
    echo "imap-log-$MH_TEST_IMAP_LOG_LEVEL-to: $MH_TEST_DIR/$profile/imap.d/log.$MH_TEST_IMAP_LOG_LEVEL" >> "$MH"
fi

################################################################################
start_test 'rudely close pre-greeting, implicit TLS'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
exit 1
EOSCRIPT

start
if ! grep -q 'TLS peer closed remote connection' "$actual"; then
    cat "$actual" >&2
    fail 'EOF error not reported'
fi

################################################################################
start_test 'no SASL-IR capability'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK [CAPABILITY IMAP4REV1 AUTH=PLAIN]
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q "server doesn't offer SASL-IR; let us know and we'll support this configuration" "$actual"; then
    cat "$actual" >&2
    fail 'missing SASL-IR not reported'
fi

################################################################################
start_test 'no UIDPLUS capability'

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK [CAPABILITY IMAP4REV1 SASL-IR AUTH=PLAIN] greeting
1 OK [CAPABILITY IMAP4REV1] AUTENTICATE response
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q "server doesn't offer required capability UIDPLUS" "$actual"; then
    cat "$actual" >&2
    fail 'missing UIDPLUS not reported'
fi

################################################################################
start_test 'protocol violation in greeting, implicit TLS'

# Greets with simply "trash\r\n".

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
trash
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q 'protocol error:  no space in response' "$actual"; then
    cat "$actual" >&2
    fail 'protocol error not reported'
fi

################################################################################
start_test 'protocol violation in AUTHENTICATE response'

# Responds to the AUTHENTICATE command with simply "trash\r\n".

cat > "$imapd" <<EOSCRIPT
#!/bin/sh
cat <<EOF
* OK [CAPABILITY IMAP4REV1 SASL-IR AUTH=PLAIN] greeting
trash
EOF
while read line; do :; done
EOSCRIPT

start
if ! grep -q 'protocol error:  no space in response' "$actual"; then
    cat "$actual" >&2
    fail 'protocol error not reported'
fi

finish_test
exit $failed