/*
 * To change this license header, choose License Headers in Project Properties.
 * To change this template file, choose Tools | Templates
 * and open the template in the editor.
 */
package testjtls1;

import java.io.BufferedInputStream;
import java.io.FileInputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;
import java.net.MalformedURLException;
import java.net.URL;
import java.security.KeyManagementException;
import java.security.KeyStore;
import java.security.KeyStoreException;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.Security;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertPath;
import java.security.cert.CertPathBuilder;
import java.security.cert.CertPathValidator;
import java.security.cert.CertPathValidatorResult;
import java.security.cert.CertStore;
import java.security.cert.Certificate;
import java.security.cert.CertificateException;
import java.security.cert.CertificateFactory;
import java.security.cert.CollectionCertStoreParameters;
import java.security.cert.PKIXBuilderParameters;
import java.security.cert.PKIXCertPathBuilderResult;
import java.security.cert.PKIXCertPathValidatorResult;
import java.security.cert.TrustAnchor;
import java.security.cert.X509CertSelector;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.HashSet;
import java.util.List;
import java.util.Set;
import java.util.logging.Level;
import java.util.logging.Logger;
import java.util.prefs.Preferences;
import javax.net.ssl.HttpsURLConnection;
import javax.net.ssl.KeyManagerFactory;
import javax.net.ssl.SSLContext;
import javax.net.ssl.TrustManagerFactory;
import ru.CryptoPro.Crypto.CryptoProvider;
import ru.CryptoPro.JCP.JCP;
import ru.CryptoPro.reprov.RevCheck;
import ru.CryptoPro.ssl.Provider;
//import ru.gosuslugi.dom.schema.integration.house_management_service_async.HouseManagementPortsTypeAsync;
//import ru.gosuslugi.dom.schema.integration.house_management_service_async.HouseManagementServiceAsync;

/**
 *
 * @author home
 */
public class TestGIS_SOAP {

    /**
     * @param args the command line arguments
     */
    public static void main(String[] args) {
        
        new TestGIS_SOAP().start();
        
    }
    private SSLContext sc;
    private byte[] buf;
    
//    private HouseManagementPortsTypeAsync getHouseManagementPortAsync() throws DatatypeConfigurationException {
//        HouseManagementPortsTypeAsync houseManagementPort = new HouseManagementServiceAsync().getHouseManagementPortAsync();
//        return houseManagementPort;
//    }

    private void start() {
        try {
            //отключение проверки сертификатов trustStore
            TLSSettings.setDefaultCRLLocation("C:\\Work\\Work\\certs");
            TLSSettings.setDefaultEnableRevocation(true); //если поставить false, то будет java.security.KeyManagementException
            TLSSettings.setDefaultCRLRevocationOffline(true);//изменение вообще не влияет
            TLSSettings.setDefaultCRLRevocationOnline(false);//изменение вообще не влияет
            TLSSettings.setTlsProhibitDisabledValidation(false);//изменение вообще не влияет

            Security.addProvider(new JCP());
            Security.addProvider(new RevCheck());
            Security.addProvider(new CryptoProvider());
            Security.addProvider(new Provider());

            System.setProperty("com.sun.security.enableCRLDP", "true"); // для проверки по CRL DP
            System.setProperty("com.sun.security.enableAIAcaIssuers", "true"); // для загрузки сертификатов по AIA из сети
            System.setProperty("ru.CryptoPro.reprov.enableAIAcaIssuers", "true"); // для загрузки сертификатов по AIA из сети

            KeyStore keyStore = KeyStore.getInstance(JCP.HD_STORE_NAME);
            keyStore.load(null,null);
//            keyStore.load(new FileInputStream("c:\\Work\\Work\\HDImageStore\\new_2012_256.keystore"),
//                    "password".toCharArray());
            KeyManagerFactory kmf = KeyManagerFactory.getInstance("GostX509");
            kmf.init(keyStore, "1234567890".toCharArray());//Здесь доступ к контейнеру по умолчанию как я понял

            KeyStore trustStore = KeyStore.getInstance("CertStore", "JCP");//У меня нет хранилища JKC,
            trustStore.load(null, null);    // я добавляю нужные сертификаты сам

            CertificateFactory cf = CertificateFactory.getInstance("X509");
            Certificate trstCert = cf.generateCertificate(new BufferedInputStream(new FileInputStream("c:\\Work\\Work\\CA-PPAK.der")));
            trustStore.setCertificateEntry("certificate", trstCert);
            trstCert = cf.generateCertificate(new FileInputStream("c:\\Work\\Work\\CA-PPAK1.cer"));
            trustStore.setCertificateEntry("ca1", trstCert);

            TrustManagerFactory tmf = TrustManagerFactory.getInstance("GostX509");
            tmf.init(trustStore);

            //SSL Контекст
            sc = SSLContext.getInstance("GostTLS");
            sc.init(kmf.getKeyManagers(), tmf.getTrustManagers(), null);

//            URL url = new URL("https://testgost2012st.cryptopro.ru/gost2st.txt");
            URL url = new URL("https://api.dom.gosuslugi.ru/ext-bus-home-management-service/services/HomeManagementAsync");
//            URL url = new URL("https://tlsgost-2001auth.cryptopro.ru/");
            HttpsURLConnection cpm = (HttpsURLConnection) url.openConnection();
            cpm.setSSLSocketFactory(sc.getSocketFactory());

            cpm.setDoOutput(true);
            cpm.connect();
            OutputStream os = cpm.getOutputStream();
            os.write(new byte[]{4, 2, 54, 33, 55});
            InputStream is = cpm.getInputStream();
            if (is.available() > 0) {
                buf = new byte[is.available()];
                is.read(buf);
            }
            os.close();
            is.close();
            cpm.disconnect();
        } catch (MalformedURLException ex) {
            Logger.getLogger(TestGIS_SOAP.class.getName()).log(Level.SEVERE, null, ex);
        } catch (IOException ex) {
            Logger.getLogger(TestGIS_SOAP.class.getName()).log(Level.SEVERE, null, ex);
        } catch (KeyStoreException | NoSuchProviderException | NoSuchAlgorithmException | CertificateException | UnrecoverableKeyException | KeyManagementException ex) {
            Logger.getLogger(TestGIS_SOAP.class.getName()).log(Level.SEVERE, null, ex);
        }
    }
}