<?php
/****************************************************************************** 
 * Copyright 1991-2012 by Quantum Corporation.  All rights reserved.
 * No part of this work may be reproduced or transmitted in any
 * form or by any means, electronic or mechanical, including
 * photocopying and recording, or by any information storage
 * or retrieval system, except as may be expressly permitted by
 * the 17 U.S.C. section 101, et. seq., or in writing by
 * Quantum Corporation.
 *******************************************************************************/
include('common_admin_inc.htm');

class ServerAddress
{
   var $ip;
   var $port;

   function ServerAddress($ip_in, $port_in)
   {
      $this->ip = $ip_in;
      $this->port = $port_in;
   }
}

$interval = get_ekm_test_interval($user);
$warningThreshold = get_ekm_hb_delay_warn_count($user);

if ($_SERVER[REQUEST_METHOD] == "POST")
{
   $operationInProgress = true;
   $status = new ReturnStatus();

   // Get server type
   $type = intval($_POST["type"]);

   // Collect manager info
   $managers = array();
   for($i = 0; $i < 10; $i++)
   {
      $ipname = "ip_".$i;
      if(strlen($_POST[$ipname]) > 0)
      {
         $manager = new ServerAddress($_POST[$ipname], $type == 2 ? 6000 : intval($_POST["port_".$i]));
         error_log("Adding manager: ".print_r($manager, true));
         array_push($managers, $manager);
      }
   }

   error_log("Setting manager info: TYPE = ".print_r($type, true)."\n".print_r($managers, true));

   set_ekm_type($user, $type);
   set_ekm_multi($user, $managers, $type, ($type == 1 || $type == 5 ? $_POST["useSSL"] : true));

   // Setup background path diags
   $diags_enabled = isset($_POST["diags"]);
   $new_interval = $diags_enabled ? intval($_POST["interval"]) : 0;
   if($interval != $new_interval)
   {
      set_ekm_test_interval($user, $new_interval);
   }
   $new_warningThreshold = $diags_enabled ? intval($_POST["warningThreshold"]) : 3;
   if($warningThreshold != $new_warningThreshold)
   {
      set_ekm_hb_delay_warn_count($user, $new_warningThreshold);
   }

   print $status->out();
   return;
}

$ekmDiagIntervals = array();
for($i = 5; $i <= 60; $i += 5)
{
   $ekmDiagIntervals[$i] = $i;
}

$ekmWarningThresholds = array();
for($i = 0; $i <= 24; $i++)
{
   $ekmWarningThresholds[($i == 0 ? "Off" : $i)] = $i;
}

// Get the encryption info we need
$ekmType = get_ekm_type($user);

$qekmDefaults = get_ekm_multi($user, 1);
$akmDefaults = get_ekm_multi($user, 2);
$kmipDefaults = get_ekm_multi($user, 4);
$tklmDefaults = get_ekm_multi($user, 5);

// Determine which info to show by default
$defaultEkm = $akmDefaults;
if($ekmType == 4)
{
   $defaultEkm = $kmipDefaults;
}
else if($ekmTYpe == 1)
{
   $defaultEkm = $qekmDefaults;
}
else if($ekmTYpe == 5)
{
   $defaultEkm = $tklmDefaults;
}

// Determine if LME is enabled on a partition
$hasLMEPartition = false;
$libs = get_logical_libraries($user, $sortCriteria);
foreach($libs as $lib)
{
   if($lib->method == 4)
   {
      $hasLMEPartition = true;
      break;
   }
}


$hasLoadedEkmDrive = false;
$ekmServerTypeMap = array();
$drives = get_all_drives($user, $sortCriteria);
foreach($drives as $drive)
{
   // Determine if an encryption-capable drive is loaded.
   if($drive->encryptionSupported && $drive->barcode != "")
   {
      $hasLoadedEkmDrive = true;
   }

   // Determine which ekm types are actually supported, and use this to
   // build the list of server types to show.
   if(($drive->encryptionSupported && ($drive->vendor == "HP") || ($drive->vendor == "IBM" && getDriveGeneration($drive) >= 5)) && ($Brand != "dell"))
   {
      $ekmServerTypeMap[2] = "SKM";
      $ekmServerTypeMap[4] = "KMIP Key Manager";
   }
   if($drive->encryptionSupported && $drive->vendor == "IBM")
   {
      if ($Brand == "dell")
      {
         $ekmServerTypeMap[1] = "Q-EKM/SKLM/TKLM";
      }
      else
      {
         $ekmServerTypeMap[1] = "Q-EKM";
         $ekmServerTypeMap[5] = "TKLM/SKLM";
      }
   }
}

// Determine if encryption is licensed
$hasEKMLic = is_ibm_encryption_licensed($user);

function up_arrow($i)
{
   if($i > 0)
   {
      echo "<img src=\"images/icons/up_arrow.gif\" class=\"arrow\" onclick=\"javascript:handleMoveUp(".$i.");\"/>";
   }
}

function down_arrow($i)
{
   if($i < 9)
   {
      echo "<img src=\"images/icons/dn_arrow.gif\" ".($i == 1 ? "id=\"skm_end\"" : "")." class=\"arrow\" onclick=\"javascript:handleMoveDown(".$i.");\"/>";
   }
}

?>
<html lang="en">
<head>
<title>Setup - Encryption Key Server Access Configuration</title>

<?
css("style");
js("common");
js("loading");
js("validate");
?>

<script type="text/javascript">

var launchProgressWindowDo = "progressWindowIndex.htm";
var progressWindowDo = "progressWindow.htm";
var operation = "";

<? convertToJs($akmDefaults, "akmDefaults") ?>
<? convertToJs($kmipDefaults, "kmipDefaults") ?>
<? convertToJs($qekmDefaults, "qekmDefaults") ?>
<? convertToJs($tklmDefaults, "tklmDefaults") ?>

var interval = <?= $interval ?>;
var warningThreshold = <?= $warningThreshold ?>;

var formHash = "";

function applyChanges()
{
   // Determine if something was changed
   if(formHash == getFormHash("MainForm"))
   {
      alert("No changes were made.");
      return;
   }

   // Validations -
   // 1. IP fields must be valid IPs or hostnames
   // 2. Ports must be valid ports
   // 3. Any IP given must have a port given as well
   // 4. Any port given must have an IP given as well (ignore for SKM)
   // 5. All IPs must be different
   // 6. Either two or more servers must be given or none

   var type = parseInt($("type").value);

   var ip_address_error = false;
   var port_error = false;
   var incomplete_server_error = false;
   var duplicate_error = false;
   var unitary_server_error = false;

   var valid_server_count = 0;

   for(var i = 0; i < 10; i++)
   {
      var ip = $("ip_" + i).value;
      var raw_port = $("port_" + i).value;
      var port = parseInt(raw_port);

      if(!checkHostOrIP($("ip_" + i), "1"))
      {
         ip_address_error = true;
         break;
      }

      if(port > 65535 || port == 0)
      {
         port_error = true;
         break;
      }

      if(ip.length > 0 && raw_port.length == 0)
      {
         incomplete_server_error = true;
         break;
      }

      if(ip.length > 0)
      {
         for(var c = 0; c < 10; c++)
         {
            if(i == c) continue;

            var check_ip = $("ip_" + c).value;
            if(check_ip == ip)
            {
               duplicate_error = true;
               break;
            }
         }
      }


      if(ip.length > 0) valid_server_count++;
   }

   if(type != 1 && valid_server_count == 1)
   {
      unitary_server_error = true;
   }

   if(ip_address_error)
   {
      // No alert - the check method displays an error
      // on its own.
      return;
   }

   if(port_error)
   {
      alert("Invalid Port, must be a number betwwen 1 and 65535.");
      return;
   }

   if(incomplete_server_error)
   {
      alert("An IP and a Port must be entered for each server address.");
      return;
   }

   if(duplicate_error)
   {
      alert("Key Servers must use a unique server address.");
      return;
   }

   if(unitary_server_error)
   {
      alert("At least two servers must be entered when configuring key servers.");
      return;
   }

   openProgressWindow("Setting EKM Server Settings", "MainForm");
}

function handleTypeChange()
{
   var type = $("type").value;

   if(type == "2")
   {
      // SKM
      $("useSSL").checked = true;
      for(var i = 0; i < 10; i++)
      {
         if(akmDefaults["managers"].length > i)
         {
            $("ip_" + i).value = akmDefaults["managers"][i]["ip"];
            $("port_" + i).value = 6000;
         }
         else
         {
            $("ip_" + i).value = "";
            $("port_" + i).value = 6000;
         }
      }
   }
   else if(type == "4")
   {
      // KMIP
      $("useSSL").checked = true;
      for(var i = 0; i < 10; i++)
      {
         if(kmipDefaults["managers"].length > i)
         {
            $("ip_" + i).value = kmipDefaults["managers"][i]["ip"];
            $("port_" + i).value = kmipDefaults["managers"][i]["port"];
         }
         else
         {
            $("ip_" + i).value = "";
            $("port_" + i).value = "5696";
         }
      }
   }
   else if(type == "1")
   {
      // Q-EKM
      for(var i = 0; i < 10; i++)
      {
         $("useSSL").checked = qekmDefaults["ssl"];
         if(qekmDefaults["managers"].length > i)
         {
            $("ip_" + i).value = qekmDefaults["managers"][i]["ip"];
            $("port_" + i).value = qekmDefaults["managers"][i]["port"];
         }
         else
         {
            $("ip_" + i).value = "";
            $("port_" + i).value = qekmDefaults["ssl"] ? "443" : "3801";
         }
      }
   }
   else if(type == "5")
   {
      // TKLM
      for(var i = 0; i < 10; i++)
      {
         $("useSSL").checked = tklmDefaults["ssl"];
         if(tklmDefaults["managers"].length > i)
         {
            $("ip_" + i).value = tklmDefaults["managers"][i]["ip"];
            $("port_" + i).value = tklmDefaults["managers"][i]["port"];
         }
         else
         {
            $("ip_" + i).value = "";
            $("port_" + i).value = tklmDefaults["ssl"] ? "443" : "3801";
         }
      }
   }

   // Hide/show extended manager fields
   var rows = document.getElementsByClassName("extendedManager");
   for(var row in rows)
   {
      if(typeof rows[row] == "function") continue; // need this due to IE issue
      rows[row].style.visibility = ($("type").value != "4" ? "hidden" : "visible");
   }

   // enable/disable port fields
   var elements = document.getElementsByClassName("portField");
   for(var element in elements)
   {
      elements[element].disabled = ($("type").value == "2" ? true : false);
   }

   // Hide/show order buttons
   var arrows = document.getElementsByClassName("arrow");
   for(var element in arrows)
   {
      if(typeof arrows[element] == "function") continue; // need this due to IE issue
      arrows[element].style.visibility = (type != "4" ? "hidden" : "visible");
   }

   // Hide/show warning threshold (only show for Q-EKM & TKLM)
   $("warningThresholdRow").style.display = (type == "1" || type == "5" ? "block" : "none");

   // Enable SSL checkbox for Q-EKM & TKLM
   $("useSSL").disabled = (type != 1 && type != 5);
   $("useSSL_state_text").innerHTML = ($("useSSL").checked ?  "Enabled" : "Disabled");
}

function swapValue(elementA, elementB)
{
   var tempValue = elementA.value;
   elementA.value = elementB.value;
   elementB.value = tempValue;
}

function handleMoveUp(index)
{
   if(index == 0) return;

   swapValue($("ip_" + index), $("ip_" + (index - 1)));
   swapValue($("port_" + index), $("port_" + (index - 1)));
}

function handleMoveDown(index)
{
   if(index == 9) return;

   swapValue($("ip_" + (index + 1)), $("ip_" + index));
   swapValue($("port_" + (index + 1)), $("port_" + index));
}

function handleDelete(index)
{
   if(index < 0 || index > 9) return;

   $("ip_" + index).value = "";
   $("port_" + index).value = "";
}

function handleDiagChange()
{
   $("interval").disabled = !($("diags").checked);
   $("warningThreshold").disabled = !($("diags").checked);
   $("diags_state_text").innerHTML = ($("diags").checked ?  "Enabled" : "Disabled");
}

function handleSSLChange()
{
   var type = $("type").value;
   var ssl = $("useSSL").checked;
   if((type == "1" || type == "5") && ssl)
   {
      if($("port_0").value == 3801) $("port_0").value = 443;
      if($("port_1").value == 3801) $("port_1").value = 443;
   }
   if((type == "1" || type == "5") && !ssl)
   {
      if($("port_0").value == 443) $("port_0").value = 3801;
      if($("port_1").value == 443) $("port_1").value = 3801;
   }
}

function registerEvents()
{
   // Put handlers here for changing EKM type
   $("type").onchange = handleTypeChange;
   $("diags").onchange = handleDiagChange;
   $("useSSL").onchange = handleSSLChange;

   // Set initial field state
   handleTypeChange();

   if(interval == 0) $("interval").disabled = true;

   // Store the initial form hash so we can tell if
   // anything was changed at submit time.
   formHash = getFormHash("MainForm");
}

</script>

<style type="text/css">

label {
   width: 250px;
}

.formElementHolder {
   width: 250px;
}

.headingNotes {
   display: table;
}

.noteIndicator {
   display: table-cell;
}

.noteBody {
   display: table-cell;
}

#managerTable {
   font-size: 10pt;
   width: 50%;
   text-align: center;
   margin: 0 auto;
}

#managerTable th {
   background-color: #809CA6;
   font-weight: normal;
}

#diag_link {
   text-align: center;
}

</style>

</head>

<body onload="javascript:{if(parent.frames[1]&&parent.frames['topFrame'].Go)parent.frames['topFrame'].Go();}IsPageLoaded();registerEvents();">
<input type="hidden" id="<?=ROBOHELP_ID?>" value="<?=$Brand == 'dell'?SetupEKMSysDell:SetupEKMSys?>" />

<a name="topPage"></a>

<div id="sessionDiv" class="visibleDiv"><center>

<form name="MainForm" id="MainForm" method="post" action="<? echo $_SERVER[PHP_SELF] ?>" target="returnStatus">
<div class="mainContent">
   <h1 class="pageTitle">Setup - Encryption System Configuration</h1>
   <p class="headingText">
      Set up the encryption key management server access for library managed encryption.
   </p>

<? if($hasEKMLic) { ?>

   <p class="headingText">
      Host names may be entered if DNS is configured; otherwise enter IPv4 or IPv6 addresses only.
   </p>
   <p class="headingNotes">
      <div class="noteIndicator">Note:&nbsp</div><div class="noteBody">These server settings are only applicable when a partition's encryption method is set to library managed encryption
(see <a href="<?= $Brand == "dell" ? "setupEKMPartitionsDELL.htm" : "setupEKMPartitions.htm" ?>">Setup->Encryption->Partition Configuration</a>).
<? if($hasLMEPartition) { ?>
      <br/><span class="warning">You cannot edit the encryption system configuration when a partition is set to library managed encryption.</span><br/>
<? } ?>
<? if($hasLoadedEkmDrive) { ?>
      <br/><span class="warning">You cannot edit the encryption system configuration when a tape cartridge is loaded in an encrytion-capable tape drive.</span>
<? } ?>
   </div><br/>
   </p>
   <p class="formRow">
      <label>Key Server Type: </label>
      <span class="formElementHolder"><?= generateComboBox($ekmServerTypeMap, "type", "type", $ekmType) ?></span>
   </p>
   <p class="formRow">
      <label>Automatic EKM Path Diagnostics: </label>
      <span class="formElementHolder"><?= generateCheckBox("diags", "diags", $interval > 0); ?></span>
   </p>
   <p class="formRow">
      <label>Interval: </label>
      <span class="formElementHolder"><?= generateComboBox($ekmDiagIntervals, "interval", "interval", $interval == 0 ? 10 : $interval) ?></span>
   </p>
   <p class="formRow" id="warningThresholdRow">
      <label>Test Warning Threshold </label>
      <span class="formElementHolder"><?= generateComboBox($ekmWarningThresholds, "warningThreshold", "warningThreshold", $warningThreshold) ?></span>
   </p>
   <p class="formRow">
      <label>SSL/TLS Connection: </label>
      <span class="formElementHolder"><?= generateCheckBox("useSSL", "useSSL", true); ?></span>
   </p>

   <center>
   <table id="managerTable">
      <tr>
         <th width="20%">#</th>
         <th width="60%">Key Server IP Address or Host Name</th>
         <th width="20%">Port</th>
         <th colspan="2" class="arrow">Order</th>
      </tr>
<? for($i = 0; $i < 10; ++$i) { ?>
      <tr <?= $i >= 2 && $type != 4 ? "class=\"extendedManager\"" : "" ?>>
         <td><?= $i + 1 ?></td>
         <td><input type="text" name="ip_<?= $i ?>" id="ip_<?= $i ?>" size="50" maxlength="40" value="<?= $defaultEkm->managers[$i]->ip ?>" onKeyPress='javaascript: return isValidKey(event, LETTERS_NUMBERS + ".-:/");'/></td>
         <td><input type="text" name="port_<?= $i ?>" id="port_<?= $i ?>" class="portField" size="10" maxlength="5" value="<?= $defaultEkm->managers[$i]->port ?>" onKeyPress="javaascript: return isValidKey(event, NUMBERS);"/></td>
         <td><? up_arrow($i) ?></td><td><? down_arrow($i) ?></td>
      </tr>
<? } ?>
   </table>
   </center>
   <p id="diag_link">
      <a href="EKMTest.htm">Click here</a> to run EKM Path Diagnostics.
   </p>

<? } else { /* EKM Licensed? */ ?>

<p class="headingText">
   An Encryption Key Management license must be installed on the library in order to use this feature.<br/>
   Please <a href="license.htm" title="Load the License page" target="_self">click here</a> to add a license key.
</p>

<? } ?>

<div id="NAVDiv" style="position:relative; width:100%;">
   <br>
   <table class="navbar" id="button" align=center><tr>
      <td>
         <br>
         <a href="javascript:loadHomePage();"
            onMouseOver="changeImage(1,'cancel');window.status='Return to home page'; return true;"
            onMouseOut="changeImage(0,'cancel');window.status=''; return true;">
         <img name=cancel title='Return to home page' src="images/buttons/cancel.gif" border=0></a>
<? if(!$hasLoadedEkmDrive && !$hasLMEPartition) { ?>
         <a href="javascript:applyChanges();"
            onMouseOver="changeImage(1,'apply');window.status='Apply the Changes'; return true;"
            onMouseOut="changeImage(0,'apply');window.status=''; return true;">
         <img name=apply src="images/buttons/apply.gif" border=0></a>
<? } ?>
      </td>
   </tr></table>
</div>
</form>
</center></div>

<?php
include('progressWin_inc.htm');
?>

</body></html>