#!/bin/bash
#
# @package      hubzero-submit-distributor
# @file         genuserpki
# @author       Steven Clark <clarks@purdue.edu>
# @copyright    Copyright (c) 2004-2014 HUBzero Foundation, LLC.
# @license      http://www.gnu.org/licenses/lgpl-3.0.html LGPLv3
#
# Copyright (c) 2004-2014 HUBzero Foundation, LLC.
#
# This file is part of: The HUBzero(R) Platform for Scientific Collaboration
#
# The HUBzero(R) Platform for Scientific Collaboration (HUBzero) is free
# software: you can redistribute it and/or modify it under the terms of
# the GNU Lesser General Public License as published by the Free Software
# Foundation, either version 3 of the License, or (at your option) any
# later version.
#
# HUBzero is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Lesser General Public License for more details.
#
# You should have received a copy of the GNU Lesser General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
# HUBzero is a registered trademark of HUBzero Foundation, LLC.
#
trap onerror ERR

onerror() {
   if [ "${LOCK}" != "" ] ; then
      rm -f ${LOCK}
   fi
   exit 1
}

JOBKEYNAME=${1:-condorpki}
SUBMITHOST=`hostname --fqdn`

PKI=""
LOCK=""

if [ ! -d ${HOME}/.ssh ] ; then
   mkdir ${HOME}/.ssh
   chmod 700 ${HOME}/.ssh
fi
cd ${HOME}/.ssh

START=`date +"%s"`
while [ -f ${JOBKEYNAME}.lock ] ; do
   sleep 2
   NOW=`date +"%s"`
   ELAPSED=$(( ${NOW} - ${START} ))
   if [ ${ELAPSED} -gt 60 ] ; then
      rm ${JOBKEYNAME}.lock
   fi
done
LOCK=${PWD}/${JOBKEYNAME}.lock
touch ${LOCK}

if [ -f authorized_keys ] ; then
   KEYCOUNT=`grep "${JOBKEYNAME}@${SUBMITHOST}" authorized_keys | wc -l`
   if [ ${KEYCOUNT} -ne 1 ] ; then
      rm -f ${JOBKEYNAME} ${JOBKEYNAME}.pub
   fi
fi

if [ -f ${JOBKEYNAME} ] ; then
   if [ ! -f ${JOBKEYNAME}.pub ] ; then
      rm ${JOBKEYNAME}
   fi
fi
if [ -f ${JOBKEYNAME}.pub ] ; then
   if [ ! -f ${JOBKEYNAME} ] ; then
      rm ${JOBKEYNAME}.pub
   fi
fi
if [ -f ${JOBKEYNAME} ] ; then
   PKI=${HOME}/.ssh/${JOBKEYNAME}
else
   if [ -f authorized_keys ] ; then
      sed -e "/${JOBKEYNAME}@${SUBMITHOST}/d" authorized_keys >  authorized_keys.${JOBKEYNAME}
      echo -e '\n'                                            >> authorized_keys.${JOBKEYNAME}
      cat -s authorized_keys.${JOBKEYNAME} > authorized_keys
      rm -f authorized_keys.${JOBKEYNAME}
   fi
   ssh-keygen -N "" -f ${JOBKEYNAME} -C "${JOBKEYNAME}@${SUBMITHOST}" > /dev/null
   chmod 600 ${JOBKEYNAME}.pub
   echo -n 'from="'${SUBMITHOST}'" ' >> authorized_keys
   cat ${JOBKEYNAME}.pub             >> authorized_keys
   PKI=${HOME}/.ssh/${JOBKEYNAME}
fi

rm -f ${LOCK}

echo ${PKI}
exit 0
