#include <glib.h>
#include <nss.h>
#include <volume_key/libvolume_key.h>

#define DEVICE "/dev/vda2"
#define PASSPHRASE "anaconda"
#define CERT_DATA "-----BEGIN CERTIFICATE-----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\nWYY+FLp86wV2lt/lwoSTYTaY8q6lhbYX7Wf/bmc=\n-----END CERTIFICATE-----\n"

static gchar *always_fail_cb (gpointer data __attribute__((unused)), const gchar *prompt __attribute__((unused)), int echo __attribute__((unused))) {
    return NULL;
}

static gchar *give_passphrase_cb (gpointer data, const gchar *prompt __attribute__((unused)), unsigned failed_attempts) {
    if (failed_attempts == 0)
        /* Return a copy of the passphrase that will be freed by volume_key */
        return g_strdup (data);
    return NULL;
}

static void free_passphrase_cb (gpointer data) {
    g_free (data);
}

int main (void) {
    struct libvk_volume *volume = NULL;
    struct libvk_ui *ui = NULL;
    CERTCertificate *cert = NULL;
    gchar *passphrase_copy = NULL;
    gchar *cert_data_copy = NULL;
    GError *error = NULL;
    gpointer packet_data = NULL;
    gsize packet_data_size = 0;

    if (!NSS_IsInitialized())
        if (NSS_NoDB_Init(NULL) != SECSuccess) {
            g_warning ("Failed to initialize NSS\n");
            return 1;
        }

    volume = libvk_volume_open (DEVICE, &error);
    if (!volume) {
        g_print ("%s\n", error->message);
        return 1;
    }

    ui = libvk_ui_new ();
    libvk_ui_set_generic_cb (ui, always_fail_cb, NULL, NULL);

    passphrase_copy = g_strdup (PASSPHRASE);
    libvk_ui_set_passphrase_cb (ui, give_passphrase_cb, passphrase_copy, free_passphrase_cb);

    if (libvk_volume_get_secret (volume, LIBVK_SECRET_DEFAULT, ui, &error) != 0) {
        libvk_volume_free (volume);
        libvk_ui_free (ui);
        g_print ("%s\n", error->message);
        return 1;
    }

    cert_data_copy = g_strdup (CERT_DATA);
    cert = CERT_DecodeCertFromPackage (cert_data_copy, strlen(cert_data_copy));
    if (!cert) {
        libvk_volume_free (volume);
        libvk_ui_free (ui);
        g_free (cert_data_copy);
        g_print ("Failed to decode the certificate data\n");
        return 1;
    }

    packet_data = libvk_volume_create_packet_asymmetric_with_format (volume, &packet_data_size, LIBVK_SECRET_DEFAULT, cert,
                                                                     ui, LIBVK_PACKET_FORMAT_ASYMMETRIC_WRAP_SECRET_ONLY, &error);
    if (!packet_data) {
        g_print ("Failed to get escrow data: %s\n", error->message);
        g_clear_error (&error);
        return 1;
    }
    
    g_print ("Packet data generated!\n");

    CERT_DestroyCertificate (cert);
    libvk_volume_free (volume);
    libvk_ui_free (ui);
    g_free (cert_data_copy);
    return 0;
}