#! /bin/sh

CVCA=cvca.cvcert
DVCA=dvca.cvcert
TERMINAL=at.cvcert
TERM_KEY=at_key.pkcs8

ACCESS=ef_cardaccess
SECURITY=ef_cardsecurity
NPA_KEY=npa_key

if test -z "$DATA"
then
    DATA=../virtualsmartcard/npa-example-data
fi

if test -z "$VICC"
then
    if test -r ../virtualsmartcard/src/vpicc/vicc.in -a -n "`which python`"
    then
        VICC="python ../virtualsmartcard/src/vpicc/vicc.in"
    elif test -x ../virtualsmartcard/src/vpicc/vicc
    then
        VICC=../virtualsmartcard/src/vpicc/vicc
    elif test -n "`which vicc`"
    then
        VICC=vicc
    else
        echo "vicc not found"
        exit 1
    fi
fi

if test -z "$NPA_TOOL"
then
    if test -x ../npa/src/npa-tool
    then
        NPA_TOOL=../npa/src/npa-tool
    elif test -n "`which npa-tool`"
    then
        NPA_TOOL=npa-tool
    else
        echo "npa-tool not found"
        exit 1
    fi
fi

for KA in ecdh dh
do
    echo "$VICC --type nPA --ef-cardsecurity=$DATA/$KA/$SECURITY \
        --ef-cardaccess=$DATA/$KA/$ACCESS --ca-key=$DATA/$KA/$NPA_KEY \
        --cvca=$DATA/$KA/$CVCA --disable-ta-checks >/dev/null 2>&1 &"
    $VICC --type nPA --ef-cardsecurity=$DATA/$KA/$SECURITY \
        --ef-cardaccess=$DATA/$KA/$ACCESS --ca-key=$DATA/$KA/$NPA_KEY \
        --cvca=$DATA/$KA/$CVCA --disable-ta-checks >/dev/null 2>&1 &
    VICC_PID=$!
    if test $? -ne 0
    then
        echo "could not start vicc"
        exit 1
    fi

    sleep 1

    echo "$NPA_TOOL --pin=111111 --private-key=$DATA/$KA/$TERM_KEY \
        --cv-certificate=$DATA/$KA/$DVCA,$DATA/$KA/$TERMINAL \
        --older-than=19991231 --verify-validity=20201020 \
        --read-dg1 --read-dg2 --read-dg3 --read-dg4 --read-dg5 --read-dg6 --read-dg7 --read-dg8 --read-dg9 --read-dg10 --read-dg11 --read-dg12 --read-dg13 --read-dg14 --read-dg15 --read-dg16 --read-dg17 --read-dg18 --read-dg19 --read-dg20 --read-dg21 \
        --write-dg17=0107 --write-dg18=0108 --write-dg19=0109 --write-dg20=0200 --write-dg21=0201 \
        --cvc-dir=$DATA/$KA --disable-ta-checks --disable-ca-checks"
    $NPA_TOOL --pin=111111 --private-key=$DATA/$KA/$TERM_KEY \
        --cv-certificate=$DATA/$KA/$DVCA,$DATA/$KA/$TERMINAL \
        --older-than=19991231 --verify-validity=20201020 \
        --read-dg1 --read-dg2 --read-dg3 --read-dg4 --read-dg5 --read-dg6 --read-dg7 --read-dg8 --read-dg9 --read-dg10 --read-dg11 --read-dg12 --read-dg13 --read-dg14 --read-dg15 --read-dg16 --read-dg17 --read-dg18 --read-dg19 --read-dg20 --read-dg21 \
        --write-dg17=0107 --write-dg18=0108 --write-dg19=0109 --write-dg20=0200 --write-dg21=0201 \
        --cvc-dir=$DATA/$KA --disable-ta-checks --disable-ca-checks
    NPA_RESULT=$?

    kill $VICC_PID 2>/dev/null

    if test $NPA_RESULT -ne 0
    then
        echo "could not perform EAC"
        exit 1
    fi
done