import os
from click.testing import CliRunner
from certidude.cli import entry_point as cli
from datetime import datetime, timedelta
from cryptography.hazmat.primitives import hashes, serialization
from cryptography.x509.oid import NameOID

runner = CliRunner()

def test_cli_setup_authority():
    result = runner.invoke(cli, ['setup', 'authority'])
    assert not result.exception
    from certidude import const, config

    from certidude import authority
    assert authority.ca_cert.serial_number >= 0x100000000000000000000000000000000000000
    assert authority.ca_cert.serial_number <= 0xfffffffffffffffffffffffffffffffffffffff
    assert authority.ca_cert.not_valid_before < datetime.now()
    assert authority.ca_cert.not_valid_after > datetime.now() + timedelta(days=7000)

    result = runner.invoke(cli, ['serve', '-f', '-p', '8080'])
    assert not result.exception


    from cryptography import x509
    from cryptography.hazmat.primitives.asymmetric import rsa, padding
    from cryptography.hazmat.backends import default_backend
    key = rsa.generate_private_key(
        public_exponent=65537,
        key_size=4096,
        backend=default_backend()
    )

    csr = x509.CertificateSigningRequestBuilder(
        ).subject_name(x509.Name([x509.NameAttribute(NameOID.COMMON_NAME, u"test")]))

    authority.store_request(
        csr.sign(key, hashes.SHA256(), default_backend()).public_bytes(serialization.Encoding.PEM))

    result = runner.invoke(cli, ['sign', 'test', '-o'])
    assert not result.exception

    result = runner.invoke(cli, ['revoke', 'test'])
    assert not result.exception

    authority.generate_ovpn_bundle(u"test2")
    authority.generate_pkcs12_bundle(u"test3")

    result = runner.invoke(cli, ['list', '-srv'])
    assert not result.exception