#!/usr/bin/env bash

# Written by Simon Josefsson and Viktor Szakats

# Start sshd, invoke test(s), saving exit code, kill sshd, and
# return exit code.

set -e
set -u

# https://testanything.org/tap-specification.html

d="$(dirname "$0")"
uname="$(uname)"

# Load list of tests

if [ -n "${1:-}" ]; then
  # for CMake or manual
  tests="$*"
  via_args=1
else
  # for autotools
  via_args=0
  # Load list of SSHD tests from Makefile.inc
  tests=''
  load=0
  while read -r l; do
    if [[ "${l}" = 'SSHD_TESTS ='* ]]; then
      load=1
    elif [ "${load}" = '1' ]; then
      [[ "${l}" =~ [a-z0-9_]+ ]] && tests+="${tests:+ }./${BASH_REMATCH[0]}${EXEEXT:-}"
      [[ ! "${l}" = *"\\" ]] && break
    fi
  done <<< "$(tr -d $"\r" < "${d}/Makefile.inc")"
fi

if [ -n "${SSHD_TESTS_LIMIT_TO:-}" ]; then
  tests="$(echo "${tests}" | cut -d ' ' -f -"${SSHD_TESTS_LIMIT_TO}")"
  echo "# limiting tests to the first ${SSHD_TESTS_LIMIT_TO}."
fi

# Init and start sshd

d="$(cd "${d}" || exit; pwd)"  # sshd needs absolute paths

SSHD="${SSHD:-/usr/sbin/sshd}"
[[ "${uname}" = *'_NT'* ]] && SSHD="$(cygpath -u "${SSHD}")"
ver="$("${SSHD}" -V 2>&1 || true)"
if [[ "${ver}" =~ OpenSSH_[a-zA-Z0-9_\ .,]+ ]]; then
  ver="${BASH_REMATCH[0]}"
else
  ver=''
fi
echo "# sshd executable: '${SSHD}' (${ver})"

# for our test clients:
[ -z "${PRIVKEY:-}" ] && export PRIVKEY="${d}/key_rsa"
[ -z "${PUBKEY:-}" ]  && export PUBKEY="${d}/key_rsa.pub"
cakeys="${d}/openssh_server/ca_user_keys.pub"

SSHD_FLAGS="${SSHD_FLAGS:-}"
if [ -n "${DEBUG:-}" ]; then
  SSHD_FLAGS+=' -d -d'
fi

chmod go-rwx \
  "${d}"/openssh_server/ssh_host_* \
  "${cakeys}"

# shellcheck disable=SC2086
"${SSHD}" \
  -f "${SSHD_FIXTURE_CONFIG:-${d}/openssh_server/sshd_config}" \
  -o 'Port 4711' \
  -h "${d}/openssh_server/ssh_host_rsa_key" \
  -h "${d}/openssh_server/ssh_host_ecdsa_key" \
  -h "${d}/openssh_server/ssh_host_ed25519_key" \
  -o "AuthorizedKeysFile ${PUBKEY} ${d}/openssh_server/authorized_keys" \
  -o "TrustedUserCAKeys ${cakeys}" \
  -o 'PermitRootLogin yes' \
  -D \
  ${SSHD_FLAGS} &
sshdpid=$!

trap 'kill "${sshdpid}"; echo "# signal killing sshd"; exit 1;' EXIT

: "started sshd (${sshdpid})"

SSH="$(command -v "${SSH:-ssh}" || true)"
if [ -n "${SSH}" ]; then
  echo "# ssh executable: '${SSH}' ($("${SSH}" -V 2>&1 || true))"
  chmod go-rwx "${PRIVKEY}"
  if [[ "${uname}" = *'_NT'* ]]; then
    export MSYS2_ARG_CONV_EXCL='/reset'
    icacls "${PRIVKEY}" /reset
    icacls "${PRIVKEY}" /grant:r "${USERNAME}:(R)"
    icacls "${PRIVKEY}" /inheritance:r
  fi
  count=1
  # shellcheck disable=SC2086
  while ! "${SSH:-ssh}" -q -a -k \
      -F /dev/null \
      -o 'BatchMode yes' \
      -o 'StrictHostKeyChecking no' \
      -o 'UserKnownHostsFile /dev/null' \
      -o 'ConnectTimeout 3' \
      -i "${PRIVKEY}" \
      -p 4711 ${SSH_FLAGS:-} localhost exit 2>/dev/null; do
    echo '# waiting for sshd...'
    ((count++))
    [[ "${count}" -gt 8 ]] && break
    sleep 1
  done
else
  echo '# waiting for sshd...'
  sleep 5
fi

# Run tests

ec=0
count=1
total="$(echo "${tests}" | wc -w | tr -d ' ')"
anyerror=0

echo "${count}..${total}"

export OPENSSH_NO_DOCKER=1

for test in ${tests}; do
  if "${test}"; then
    res='ok'
  else
    anyerror=1
    [ "${via_args}" = '1' ] && [ "${total}" = '1' ] && ec=$?
    res='not ok'
  fi
  echo "${res} ${count} - sshd-$(basename "${test}")"
  ((count++))
done

# Stop sshd

: "killing sshd (${sshdpid})"
kill "${sshdpid}" > /dev/null 2>&1
trap '' EXIT

[ "${via_args}" = '1' ] && [ "${total}" != '1' ] && ec="${anyerror}"

exit "${ec}"