#!/bin/bash
#
# Copyright (C) 2013-2016 Nikos Mavrogiannopoulos
#
# This file is part of ocserv.
#
# ocserv is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by the
# Free Software Foundation; either version 2 of the License, or (at
# your option) any later version.
#
# ocserv is distributed in the hope that it will be useful, but
# WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
# General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with GnuTLS; if not, write to the Free Software Foundation,
# Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.

SERV="${SERV:-../src/ocserv}"
OCCTL="${OCCTL:-../src/occtl/occtl}"
srcdir=${srcdir:-.}
builddir=${builddir:-.}
PIDFILE=ocserv-pid.$$.tmp
VPNNET=172.29.205.0/24
OUTFILE=out.$$.tmp
USERNAME=test
OCCTL_SOCKET=./occtl-test-script-$$.socket

. `dirname $0`/common.sh

eval "${GETPORT}"

function finish {
	echo " * Cleaning up..."
	test -f "${PIDFILE}" && kill -- -$(cat ${PIDFILE}) 2>/dev/null
	wait
	rm -f ${OUTFILE} ${PIDFILE} test-sleep.tmp
}
trap finish EXIT

rm -f test-sleep.tmp

echo "Testing whether ocserv blocks when script blocks..."
update_config test-script-multi-user.config
${SERV} -p ${PIDFILE} -f -c ${CONFIG} -d 1 >/dev/null 2>&1 &
PID=$!

sleep 5

echo "Connecting to force script block... "
echo "!@#\$%^&*()<>" | timeout 60 ${OPENCONNECT} -q localhost:${PORT} -u "sp@c/al" --servercert=pin-sha256:xp3scfzy3rOQsv9NcOve/8YVVv+pHr4qNCXEXrNl5s8= -s /bin/true &

sleep 3

echo "Connecting to obtain cookie... "
( echo "${USERNAME}" | ${OPENCONNECT} -q localhost:${PORT} -u "${USERNAME}" --servercert=pin-sha256:xp3scfzy3rOQsv9NcOve/8YVVv+pHr4qNCXEXrNl5s8= --cookieonly >/dev/null 2>&1 ) ||
	fail $PID "Could not receive cookie from server"

echo "Connecting in background... "
( echo "${USERNAME}" | timeout 15 ${OPENCONNECT} -q localhost:${PORT} -u "${USERNAME}" --servercert=pin-sha256:xp3scfzy3rOQsv9NcOve/8YVVv+pHr4qNCXEXrNl5s8= --background >/dev/null 2>&1 ) ||
	fail $PID "Could not connect to server; probably blocked"

sleep 3

echo "Calling occtl"
${OCCTL} -s ${OCCTL_SOCKET} show user ${USERNAME} >${OUTFILE}

grep ${USERNAME} ${OUTFILE} || fail $PID "Username not found in occtl output"

exit 0
