// Copyright (C) 2009 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package com.google.gerrit.server.contact;

import com.google.gerrit.reviewdb.ReviewDb;
import com.google.gerrit.server.config.GerritServerConfig;
import com.google.gerrit.server.config.SitePaths;
import com.google.gwtorm.client.SchemaFactory;
import com.google.inject.Inject;
import com.google.inject.Provider;
import com.google.inject.ProvisionException;

import org.bouncycastle.jce.provider.BouncyCastleProvider;
import org.bouncycastle.openpgp.PGPPublicKey;
import org.eclipse.jgit.lib.Config;

import java.io.File;
import java.net.MalformedURLException;
import java.net.URL;
import java.security.Security;

/** Creates the {@link ContactStore} based on the configuration. */
public class ContactStoreProvider implements Provider<ContactStore> {
  private final Config config;
  private final SitePaths site;
  private final SchemaFactory<ReviewDb> schema;
  private final ContactStoreConnection.Factory connFactory;

  @Inject
  ContactStoreProvider(@GerritServerConfig final Config config,
      final SitePaths site, final SchemaFactory<ReviewDb> schema,
      final ContactStoreConnection.Factory connFactory) {
    this.config = config;
    this.site = site;
    this.schema = schema;
    this.connFactory = connFactory;
  }

  @Override
  public ContactStore get() {
    final String url = config.getString("contactstore", null, "url");
    if (url == null) {
      return new NoContactStore();
    }

    if (!havePGP()) {
      throw new ProvisionException("BouncyCastle PGP not installed; "
          + " needed to encrypt contact information");
    }

    final URL storeUrl;
    try {
      storeUrl = new URL(url);
    } catch (MalformedURLException e) {
      throw new ProvisionException("Invalid contactstore.url: " + url, e);
    }

    final String storeAPPSEC = config.getString("contactstore", null, "appsec");
    final File pubkey = site.contact_information_pub;
    if (!pubkey.exists()) {
      throw new ProvisionException("PGP public key file \""
          + pubkey.getAbsolutePath() + "\" not found");
    }
    return new EncryptedContactStore(storeUrl, storeAPPSEC, pubkey, schema,
        connFactory);
  }

  private static boolean havePGP() {
    try {
      Class.forName(PGPPublicKey.class.getName());
      Security.addProvider(new BouncyCastleProvider());
      return true;
    } catch (NoClassDefFoundError noBouncyCastle) {
      return false;
    } catch (ClassNotFoundException noBouncyCastle) {
      return false;
    }
  }
}

@@ -1122,16 +1122,106 @@
 o.File;%0A
+import java.lang.reflect.Constructor;%0Aimport java.lang.reflect.InvocationTargetException;%0A
 import j
@@ -2941,33 +2941,11 @@
     
-Security.addProvider(new 
+add
 Boun
@@ -2962,17 +2962,16 @@
 ovider()
-)
 ;%0A      
@@ -3129,20 +3129,888 @@
  false;%0A
-
     %7D
+ catch (SecurityException noBouncyCastle) %7B%0A      return false;%0A    %7D catch (NoSuchMethodException noBouncyCastle) %7B%0A      return false;%0A    %7D catch (InstantiationException noBouncyCastle) %7B%0A      return false;%0A    %7D catch (IllegalAccessException noBouncyCastle) %7B%0A      return false;%0A    %7D catch (InvocationTargetException noBouncyCastle) %7B%0A      return false;%0A    %7D catch (ClassCastException noBouncyCastle) %7B%0A      return false;%0A    %7D%0A  %7D%0A%0A  private static void addBouncyCastleProvider() throws ClassNotFoundException,%0A          SecurityException, NoSuchMethodException, InstantiationException,%0A          IllegalAccessException, InvocationTargetException %7B%0A    Class%3C?%3E clazz = Class.forName(BouncyCastleProvider.class.getName());%0A    Constructor%3C?%3E constructor = clazz.getConstructor();%0A    Security.addProvider((java.security.Provider) constructor.newInstance());
 %0A  %7D%0A%7D%0A

Resolve BouncyCastleProvider at runtime