<filename>src/main/resources/scripts/lib/envconfig.py
import json
import os
import logging
import base64
import sys

from com.vordel.es.xes import PortableESPKFactory
from java.text import SimpleDateFormat
from java.util import Date
from java.util.concurrent import TimeUnit
from secrets import Secrets

class FieldKey:
    def __init__(self, entity_short_hand_key, field_name, field_index, field_type):
        self.short_hand_key = entity_short_hand_key
        self.name = field_name
        self.index = field_index
        self.type = field_type

class FieldValue:
    def __init__(self, field_key, value):
        self.key = field_key
        self.value = value


class PropConfig:
    def __init__(self, property_file_path_list):
        stdin_loaded = False
        self.__properties = {}
        if not property_file_path_list:
            return

        for property_file_path in property_file_path_list:
            properties = None
            if "-" == property_file_path:
                if stdin_loaded:
                    # properties already loaded from stdin
                    continue
                stdin_loaded = True
                logging.info("Reading properties from stdin")
                properties = json.load(sys.stdin)
            else:
                if not os.path.exists(property_file_path):
                    raise ValueError("Property file '%s' doesn't exist!" % (property_file_path))

                logging.info("Reading property file '%s'" % (property_file_path))
                with open(property_file_path) as property_file:
                    properties_json = json.load(property_file)

                    if "properties" not in properties_json:
                        raise ValueError("File '%s' is not a valid property file; missing 'properties' attribute!" % (property_file_path))

                    properties = properties_json["properties"]

            # Add or overwrite properties
            for p in properties:
                if p not in self.__properties:
                    logging.debug("set property '%s' from '%s'" % (p, property_file_path))
                else:
                    logging.debug("override property '%s' from '%s'" % (p, property_file_path))
                self.__properties[p] = properties[p]
        return

    def get_property(self, key):
        if key not in self.__properties:
            return None
        return self.__properties[key]

    def set_property(self, key, value):
        self.__properties[key] = value

class EnvConfig:
    def __init__(self, config_file_path, properties, secrets):
        self.__config_file_path = None
        self.__config_json = None
        self.__properties = None
        self.__missing_vars = False
        self.__file_updated = False
        self.__migrated = False
        self.__origin_json_str = None
        self.__unconfigured_fields = []

        self.__properties = properties
        self.__pespk_factory = PortableESPKFactory.newInstance()

        self.__config_file_path = config_file_path

        self.__secrets = secrets

        if os.path.isfile(self.__config_file_path):
            logging.info("Reading configuration file '%s'" % (self.__config_file_path))
            with open(self.__config_file_path) as config_file:
                self.__config_json = json.load(config_file)
            self.__origin_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
            self.__reset()
        else:
            logging.info("Configuration file '%s' doesn't exist; empty file will be created." % (self.__config_file_path))
            self.__config_json = {}
        return

    def __get_entities(self):
        json_entities = None
        if "entities" in self.__config_json:
            json_entities = self.__config_json["entities"]
        else:
            self.__config_json["entities"] = {}
            self.__missing_vars = True
            json_entities = self.__config_json["entities"]
        return json_entities

    def __get_entity(self, field_key):
        json_entities = self.__get_entities()
        json_entity = None
        if field_key.short_hand_key in json_entities:
            json_entity = json_entities[field_key.short_hand_key]
        else:
            self.__missing_vars = True
            json_entity = {"description": "", "fields": {}}
            json_entities[field_key.short_hand_key] = json_entity
        return json_entity

    def __get_field(self, field_key):
        json_entity = self.__get_entity(field_key)
        fpk = field_key.name + "#" + str(field_key.index)

        json_field = None
        if fpk in json_entity["fields"]:
            json_field = json_entity["fields"][fpk]
            json_field["used"] = True
        else:
            json_field = {"type": field_key.type, "value": None, "used": True, "source": "property"}
            json_entity["fields"][fpk] = json_field
            self.__missing_vars = True
        return json_field

    def __get_property(self, p):
        v = None

        if self.__properties:
            v = self.__properties.get_property(p)

        if v is None:
            if "properties" in self.__config_json and p in self.__config_json["properties"]:
                v = self.__config_json["properties"][p]

        if v is not None and type(v) is bool:
            v = "true" if v else "false"

        return v

    def __reset(self):
        json_entities = self.__get_entities()
        for entity in json_entities.values():
            if "fields" in entity:
                for field in entity["fields"].values():
                    # reset used flag
                    if "used" in field:
                        field["used"] = False

                    # convert to newer version
                    if "property" in field:
                        if field["property"]:
                            field["value"] = field["property"]
                            field["source"] = "property"
                        else:
                            field["source"] = "value"

                        del field["property"]
                        self.__migrated = True
                    elif "source" not in field:
                        field["source"] = "value"
                        self.__migrated = True
        return

    def has_unused_vars(self):
        json_entities = self.__get_entities()
        for entity in json_entities.values():
                if "fields" in entity:
                    for field in entity["fields"].values():
                        if "used" in field:
                            if field["used"] == False:
                                return True
        return False

    def to_shorthandkey(self, entity):
        pespk = self.__pespk_factory.createPortableESPK(entity.getEntityPk())
        return pespk.toShorthandString()

    def check_field(self, entity, entity_field):
        fk = FieldKey(self.to_shorthandkey(entity), entity_field.getEntityFieldName(), entity_field.getIndex(), entity_field.getType())
        f = self.__get_field(fk)
        return FieldValue(fk, None)

    def get_value(self, entity, entity_field):
        fk = FieldKey(self.to_shorthandkey(entity), entity_field.getEntityFieldName(), entity_field.getIndex(), entity_field.getType())
        f = self.__get_field(fk)

        if "source" not in f:
            raise ValueError("Missing 'source' property in field '%s#%s' of entity '%s'" % (fk.name, str(fk.index), fk.short_hand_key))

        if "value" not in f:
            raise ValueError("Missing 'value' property in field '%s#%s' of entity '%s'" % (fk.name, str(fk.index), fk.short_hand_key))

        value = None
        if "property" == f["source"]:
            if f["value"]:
                p = f["value"]
                value = self.__get_property(p)
                if value is None:
                    raise ValueError("Missing configured property '%s'" % (p))
        elif "value" == f["source"]:
            value = f["value"]
        elif "env" == f["source"]:
            if f["value"]:
                e = f["value"]
                value = os.environ[e]
        elif "secrets" == f["source"]:
            if not self.__secrets:
                raise ValueError("Secrets required by field '%s#%s' of entity '%s', but not specified!" % (fk.name, str(fk.index), fk.short_hand_key))
            if f["value"]:
                c = f["value"]
                value = self.__secrets.get_secret(c)
                if value is None:
                    raise ValueError("Missing configured secret '%s'" % (c))
        else:
            raise ValueError("Invalid source property '%s'" % f["source"])

        if value is None:
            self.__unconfigured_fields.append(fk)

        return FieldValue(fk, value)

    def get_unconfigured_fields(self):
        return self.__unconfigured_fields

    def update_config_file(self, force=False):
        new_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
        if self.__origin_json_str != new_json_str:
            with open(self.__config_file_path, "w") as config_file:
                config_file.write(new_json_str)
            self.__file_updated = True
            logging.info("Configuration file updated: %s" % (self.__config_file_path))
            if self.__migrated:
                logging.info("Configuration file migrated to new version.")
        return self.__file_updated

    def is_config_file_updated(self):
        return self.__file_updated


class CertRef:
    def __init__(self, alias, cert_type, cert_file_path, password = ""):
        self.__alias = alias
        self.__type = cert_type
        self.__file_path = cert_file_path
        self.__password = password

        if cert_type not in ["crt", "p12", "empty"]:
            raise ValueError("Invalid certificate type '%s' for alias '%s'!" % (cert_type, alias))
        if self.__type != "empty" and not self.__file_path:
            raise ValueError("Missing path to certificate file for alias '%s'!" % (alias))
        return

    def get_alias(self):
        return self.__alias

    def get_type(self):
        return self.__type

    def get_file(self):
        return self.__file_path

    def get_password(self):
        return self.__password
    
    def is_empty(self):
        return self.__type == "empty"

class CertInfo:
    def __init__(self, alias, subject, not_after):
        self.__alias = alias
        self.__subject = subject
        self.__not_after = not_after

    def get_alias(self):
        return self.__alias

    def get_subject(self):
        return self.__subject

    def get_info(self):
        return {"info": {"subject": self.__subject, "not_after": self.format_not_after() }}
    
    def format_not_after(self):
        """
        Formats the expiration date/time of the certificate.
        """
        df = SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ssXXX")
        return df.format(self.__not_after)

    def expiration_in_days(self):
        """
        Return the number of days until the certificate expires.
        If the certificate is already expired a negative number is returned.
        """
        now = Date()
        diff = self.__not_after.getTime() - now.getTime()
        return TimeUnit.DAYS.convert(diff, TimeUnit.MILLISECONDS)

class CertConfig:
    def __init__(self, config_file_path, properties, secrets):
        self.__config_json = None
        self.__migrated = False
        self.__origin_json_str = None
        self.__keystore = None

        self.__properties = properties
        self.__secrets = secrets        
        self.__config_file_path = config_file_path
        if os.path.isfile(self.__config_file_path):
            with open(self.__config_file_path) as config_file:
                logging.info("Reading certificate configuration '%s'." % (self.__config_file_path))
                self.__config_json = json.load(config_file)

                if "certificates" not in self.__config_json:
                    raise ValueError("File '%s' is not a valid certification config file; missing 'certificates' attribute!" % (self.__config_file_path))
            self.__origin_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
            self.__migrate()
        else:
            logging.info("Certificate configuration file '%s' doesn't exist; empty file will be created." % (self.__config_file_path))
            self.__config_json = {"certificates": {}}
        return

    def __migrate(self):
        if "certificates" in self.__config_json:
            for alias, cert_cfg in self.__config_json["certificates"].items():
                if "update" not in cert_cfg or cert_cfg["update"] is None:
                    continue

                cert = cert_cfg["update"]

                if "password-property" in cert:
                    if cert["password-property"]:
                        cert["password"] = cert["password-property"]
                        cert["source"] = "property"
                    else:
                        cert["source"] = "password"

                    del cert["password-property"]
                    self.__migrated = True
                elif "password" in cert and "source" not in cert:
                    cert["source"] = "password"
                    self.__migrated = True
        return

    def __get_property(self, p):
        v = None
        if self.__properties:
            v = self.__properties.get_property(p)

        if v is None:
            if "properties" in self.__config_json and p in self.__config_json["properties"]:
                v = self.__config_json["properties"][p]
        
        if v is not None and type(v) is bool:
            v = "true" if v else "false"

        return v

    def set_cert_infos(self, cert_infos):
        certificates = self.__config_json["certificates"]

        # clear existing certificate infos
        for alias, cert_cfg in certificates.items():
            if "origin" in cert_cfg:
                cert_cfg.pop("origin")

        # set certificate infos
        for info in cert_infos:
            if info.get_alias() in certificates:
                certificates[info.get_alias()]["origin"] = info.get_info()
            else:
                certificates[info.get_alias()] = { "origin": info.get_info() }
        return

    def set_update_cert_infos(self, cert_infos):
        certificates = self.__config_json["certificates"]

        for info in cert_infos:
            if info.get_alias() in certificates:
                if "update" in certificates[info.get_alias()]:
                    certificates[info.get_alias()]["update"].update(info.get_info())
        return

    def get_certificates(self):
        certs = []
        if "certificates" in self.__config_json:
            for alias, cert_cfg in self.__config_json["certificates"].items():
                if "update" not in cert_cfg:
                    raise ValueError("Certificate update not configured for alias '%s'!" % (alias))
                
                if cert_cfg["update"] is None:
                    continue

                cert = cert_cfg["update"]

                if "type" not in cert:
                    raise ValueError("Missing certificate type for alias '%s'!" % (alias))
                cert_type = cert["type"]

                cert_file = None
                if "file" in cert:
                    cert_file = cert["file"]

                password = None
                if "password" in cert:
                    if not cert["password"]:
                        raise ValueError("Missing value for 'password' property in 'update' for alias '%s'!" % alias)

                    if "source" not in cert:
                        raise ValueError("Missing 'source' property in 'update' for alias '%s'!" % alias)

                    if "property" == cert["source"]:
                        p = cert["password"]
                        password = self.__get_property(p)
                        if password is None:
                            raise ValueError("Missing configured property '%s' for alias '%s'!" % (p, alias))
                    elif "password" == cert["source"]:
                        password = cert["password"]
                    elif "env" == cert["source"]:
                        e = cert["password"]
                        password = os.environ[e]
                    elif "secrets" == cert["source"]:
                        if not self.__secrets:
                            raise ValueError("Secrets required for alias '%s', but not specified!" % (alias))

                        c = cert["password"]
                        password = self.__secrets.get_secret(c)
                        if password is None:
                            raise ValueError("Missing configured secret '%s' for alias '%s'!" % (c, alias))
                    else:
                        raise ValueError("Invalid password source '%s' for alias '%s'!" % (cert["source"], alias))

                c = CertRef(alias, cert_type, cert_file, password)
                certs.append(c)
        return certs

    def update_config_file(self):
        new_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
        if new_json_str != self.__origin_json_str:
            with open(self.__config_file_path, "w") as cert_file:
                json.dump(self.__config_json, cert_file, sort_keys=True, indent=2)
            logging.info("Certificate configuration file updated: %s" % (self.__config_file_path))
            if self.__migrated:
                logging.info("Certificate configuration file migrated to new version.")
        return

<filename>src/main/resources/scripts/lib/envconfig.py
import json
import os
import logging
import base64
import sys

from com.vordel.es.xes import PortableESPKFactory
from java.text import SimpleDateFormat
from java.util import Date
from java.util.concurrent import TimeUnit
from secrets import Secrets

class FieldKey:
    def __init__(self, entity_short_hand_key, field_name, field_index, field_type):
        self.short_hand_key = entity_short_hand_key
        self.name = field_name
        self.index = field_index
        self.type = field_type

class FieldValue:
    def __init__(self, field_key, value):
        self.key = field_key
        self.value = value


class PropConfig:
    def __init__(self, property_file_path_list):
        stdin_loaded = False
        self.__properties = {}
        if not property_file_path_list:
            return

        for property_file_path in property_file_path_list:
            properties = None
            if "-" == property_file_path:
                if stdin_loaded:
                    # properties already loaded from stdin
                    continue
                stdin_loaded = True
                logging.info("Reading properties from stdin")
                properties = json.load(sys.stdin)
            else:
                if not os.path.exists(property_file_path):
                    raise ValueError("Property file '%s' doesn't exist!" % (property_file_path))

                logging.info("Reading property file '%s'" % (property_file_path))
                with open(property_file_path) as property_file:
                    properties_json = json.load(property_file)

                    if "properties" not in properties_json:
                        raise ValueError("File '%s' is not a valid property file; missing 'properties' attribute!" % (property_file_path))

                    properties = properties_json["properties"]

            # Add or overwrite properties
            for p in properties:
                if p not in self.__properties:
                    logging.debug("set property '%s' from '%s'" % (p, property_file_path))
                else:
                    logging.debug("override property '%s' from '%s'" % (p, property_file_path))
                self.__properties[p] = properties[p]
        return

    def get_property(self, key):
        if key not in self.__properties:
            return None
        return self.__properties[key]

    def set_property(self, key, value):
        self.__properties[key] = value

class EnvConfig:
    def __init__(self, config_file_path, properties, secrets):
        self.__config_file_path = None
        self.__config_json = None
        self.__properties = None
        self.__missing_vars = False
        self.__file_updated = False
        self.__migrated = False
        self.__origin_json_str = None
        self.__unconfigured_fields = []

        self.__properties = properties
        self.__pespk_factory = PortableESPKFactory.newInstance()

        self.__config_file_path = config_file_path

        self.__secrets = secrets

        if os.path.isfile(self.__config_file_path):
            logging.info("Reading configuration file '%s'" % (self.__config_file_path))
            with open(self.__config_file_path) as config_file:
                self.__config_json = json.load(config_file)
            self.__origin_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
            self.__reset()
        else:
            logging.info("Configuration file '%s' doesn't exist; empty file will be created." % (self.__config_file_path))
            self.__config_json = {}
        return

    def __get_entities(self):
        json_entities = None
        if "entities" in self.__config_json:
            json_entities = self.__config_json["entities"]
        else:
            self.__config_json["entities"] = {}
            self.__missing_vars = True
            json_entities = self.__config_json["entities"]
        return json_entities

    def __get_entity(self, field_key):
        json_entities = self.__get_entities()
        json_entity = None
        if field_key.short_hand_key in json_entities:
            json_entity = json_entities[field_key.short_hand_key]
        else:
            self.__missing_vars = True
            json_entity = {"description": "", "fields": {}}
            json_entities[field_key.short_hand_key] = json_entity
        return json_entity

    def __get_field(self, field_key):
        json_entity = self.__get_entity(field_key)
        fpk = field_key.name + "#" + str(field_key.index)

        json_field = None
        if fpk in json_entity["fields"]:
            json_field = json_entity["fields"][fpk]
            json_field["used"] = True
        else:
            json_field = {"type": field_key.type, "value": None, "used": True, "source": "property"}
            json_entity["fields"][fpk] = json_field
            self.__missing_vars = True
        return json_field

    def __get_property(self, p):
        v = None

        if self.__properties:
            v = self.__properties.get_property(p)

        if v is None:
            if "properties" in self.__config_json and p in self.__config_json["properties"]:
                v = self.__config_json["properties"][p]

        if v is not None and type(v) is bool:
            v = "true" if v else "false"

        return v

    def __reset(self):
        json_entities = self.__get_entities()
        for entity in json_entities.values():
            if "fields" in entity:
                for field in entity["fields"].values():
                    # reset used flag
                    if "used" in field:
                        field["used"] = False

                    # convert to newer version
                    if "property" in field:
                        if field["property"]:
                            field["value"] = field["property"]
                            field["source"] = "property"
                        else:
                            field["source"] = "value"

                        del field["property"]
                        self.__migrated = True
                    elif "source" not in field:
                        field["source"] = "value"
                        self.__migrated = True
        return

    def has_unused_vars(self):
        json_entities = self.__get_entities()
        for entity in json_entities.values():
                if "fields" in entity:
                    for field in entity["fields"].values():
                        if "used" in field:
                            if field["used"] == False:
                                return True
        return False

    def to_shorthandkey(self, entity):
        pespk = self.__pespk_factory.createPortableESPK(entity.getEntityPk())
        return pespk.toShorthandString()

    def check_field(self, entity, entity_field):
        fk = FieldKey(self.to_shorthandkey(entity), entity_field.getEntityFieldName(), entity_field.getIndex(), entity_field.getType())
        f = self.__get_field(fk)
        return FieldValue(fk, None)

    def get_value(self, entity, entity_field):
        fk = FieldKey(self.to_shorthandkey(entity), entity_field.getEntityFieldName(), entity_field.getIndex(), entity_field.getType())
        f = self.__get_field(fk)

        if "source" not in f:
            raise ValueError("Missing 'source' property in field '%s#%s' of entity '%s'" % (fk.name, str(fk.index), fk.short_hand_key))

        if "value" not in f:
            raise ValueError("Missing 'value' property in field '%s#%s' of entity '%s'" % (fk.name, str(fk.index), fk.short_hand_key))

        value = None
        if "property" == f["source"]:
            if f["value"]:
                p = f["value"]
                value = self.__get_property(p)
                if value is None:
                    raise ValueError("Missing configured property '%s'" % (p))
        elif "value" == f["source"]:
            value = f["value"]
        elif "env" == f["source"]:
            if f["value"]:
                e = f["value"]
                value = os.environ[e]
        elif "secrets" == f["source"]:
            if not self.__secrets:
                raise ValueError("Secrets required by field '%s#%s' of entity '%s', but not specified!" % (fk.name, str(fk.index), fk.short_hand_key))
            if f["value"]:
                c = f["value"]
                value = self.__secrets.get_secret(c)
                if value is None:
                    raise ValueError("Missing configured secret '%s'" % (c))
        else:
            raise ValueError("Invalid source property '%s'" % f["source"])

        if value is None:
            self.__unconfigured_fields.append(fk)

        return FieldValue(fk, value)

    def get_unconfigured_fields(self):
        return self.__unconfigured_fields

    def update_config_file(self, force=False):
        new_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
        if self.__origin_json_str != new_json_str:
            with open(self.__config_file_path, "w") as config_file:
                config_file.write(new_json_str)
            self.__file_updated = True
            logging.info("Configuration file updated: %s" % (self.__config_file_path))
            if self.__migrated:
                logging.info("Configuration file migrated to new version.")
        return self.__file_updated

    def is_config_file_updated(self):
        return self.__file_updated


class CertRef:
    def __init__(self, alias, cert_type, cert_file_path, password = ""):
        self.__alias = alias
        self.__type = cert_type
        self.__file_path = cert_file_path
        self.__password = password

        if cert_type not in ["crt", "p12", "empty"]:
            raise ValueError("Invalid certificate type '%s' for alias '%s'!" % (cert_type, alias))
        if self.__type != "empty" and not self.__file_path:
            raise ValueError("Missing path to certificate file for alias '%s'!" % (alias))
        return

    def get_alias(self):
        return self.__alias

    def get_type(self):
        return self.__type

    def get_file(self):
        return self.__file_path

    def get_password(self):
        return self.__password
    
    def is_empty(self):
        return self.__type == "empty"

class CertInfo:
    def __init__(self, alias, subject, not_after):
        self.__alias = alias
        self.__subject = subject
        self.__not_after = not_after

    def get_alias(self):
        return self.__alias

    def get_subject(self):
        return self.__subject

    def get_info(self):
        return {"info": {"subject": self.__subject, "not_after": self.format_not_after() }}
    
    def format_not_after(self):
        """
        Formats the expiration date/time of the certificate.
        """
        df = SimpleDateFormat("yyyy-MM-dd'T'HH:mm:ssXXX")
        return df.format(self.__not_after)

    def expiration_in_days(self):
        """
        Return the number of days until the certificate expires.
        If the certificate is already expired a negative number is returned.
        """
        now = Date()
        diff = self.__not_after.getTime() - now.getTime()
        return TimeUnit.DAYS.convert(diff, TimeUnit.MILLISECONDS)

class CertConfig:
    def __init__(self, config_file_path, properties, secrets):
        self.__config_json = None
        self.__migrated = False
        self.__origin_json_str = None
        self.__keystore = None

        self.__properties = properties
        self.__secrets = secrets        
        self.__config_file_path = config_file_path
        if os.path.isfile(self.__config_file_path):
            with open(self.__config_file_path) as config_file:
                logging.info("Reading certificate configuration '%s'." % (self.__config_file_path))
                self.__config_json = json.load(config_file)

                if "certificates" not in self.__config_json:
                    raise ValueError("File '%s' is not a valid certification config file; missing 'certificates' attribute!" % (self.__config_file_path))
            self.__origin_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
            self.__migrate()
        else:
            logging.info("Certificate configuration file '%s' doesn't exist; empty file will be created." % (self.__config_file_path))
            self.__config_json = {"certificates": {}}
        return

    def __migrate(self):
        if "certificates" in self.__config_json:
            for alias, cert_cfg in self.__config_json["certificates"].items():
                if "update" not in cert_cfg or cert_cfg["update"] is None:
                    continue

                cert = cert_cfg["update"]

                if "password-property" in cert:
                    if cert["password-property"]:
                        cert["password"] = cert["password-property"]
                        cert["source"] = "property"
                    else:
                        cert["source"] = "password"

                    del cert["password-property"]
                    self.__migrated = True
                elif "password" in cert and "source" not in cert:
                    cert["source"] = "password"
                    self.__migrated = True
        return

    def __get_property(self, p):
        v = None
        if self.__properties:
            v = self.__properties.get_property(p)

        if v is None:
            if "properties" in self.__config_json and p in self.__config_json["properties"]:
                v = self.__config_json["properties"][p]
        
        if v is not None and type(v) is bool:
            v = "true" if v else "false"

        return v

    def set_cert_infos(self, cert_infos):
        certificates = self.__config_json["certificates"]

        # clear existing certificate infos
        for alias, cert_cfg in certificates.items():
            if "origin" in cert_cfg:
                cert_cfg.pop("origin")

        # set certificate infos
        for info in cert_infos:
            if info.get_alias() in certificates:
                certificates[info.get_alias()]["origin"] = info.get_info()
            else:
                certificates[info.get_alias()] = { "origin": info.get_info() }
        return

    def set_update_cert_infos(self, cert_infos):
        certificates = self.__config_json["certificates"]

        for info in cert_infos:
            if info.get_alias() in certificates:
                if "update" in certificates[info.get_alias()]:
                    certificates[info.get_alias()]["update"].update(info.get_info())
        return

    def get_certificates(self):
        certs = []
        if "certificates" in self.__config_json:
            for alias, cert_cfg in self.__config_json["certificates"].items():
                if "update" not in cert_cfg:
                    raise ValueError("Certificate update not configured for alias '%s'!" % (alias))
                
                if cert_cfg["update"] is None:
                    continue

                cert = cert_cfg["update"]

                if "type" not in cert:
                    raise ValueError("Missing certificate type for alias '%s'!" % (alias))
                cert_type = cert["type"]

                cert_file = None
                if "file" in cert:
                    cert_file = cert["file"]

                password = None
                if "password" in cert:
                    if not cert["password"]:
                        raise ValueError("Missing value for 'password' property in 'update' for alias '%s'!" % alias)

                    if "source" not in cert:
                        raise ValueError("Missing 'source' property in 'update' for alias '%s'!" % alias)

                    if "property" == cert["source"]:
                        p = cert["password"]
                        password = self.__get_property(p)
                        if password is None:
                            raise ValueError("Missing configured property '%s' for alias '%s'!" % (p, alias))
                    elif "password" == cert["source"]:
                        password = cert["password"]
                    elif "env" == cert["source"]:
                        e = cert["password"]
                        password = os.environ[e]
                    elif "secrets" == cert["source"]:
                        if not self.__secrets:
                            raise ValueError("Secrets required for alias '%s', but not specified!" % (alias))

                        c = cert["password"]
                        password = self.__secrets.get_secret(c)
                        if password is None:
                            raise ValueError("Missing configured secret '%s' for alias '%s'!" % (c, alias))
                    else:
                        raise ValueError("Invalid password source '%s' for alias '%s'!" % (cert["source"], alias))

                c = CertRef(alias, cert_type, cert_file, password)
                certs.append(c)
        return certs

    def update_config_file(self):
        new_json_str = json.dumps(self.__config_json, sort_keys=True, indent=2)
        if new_json_str != self.__origin_json_str:
            with open(self.__config_file_path, "w") as cert_file:
                json.dump(self.__config_json, cert_file, sort_keys=True, indent=2)
            logging.info("Certificate configuration file updated: %s" % (self.__config_file_path))
            if self.__migrated:
                logging.info("Certificate configuration file migrated to new version.")
        return

# properties already loaded from stdin # Add or overwrite properties # reset used flag # convert to newer version #%s' of entity '%s'" % (fk.name, str(fk.index), fk.short_hand_key)) #%s' of entity '%s'" % (fk.name, str(fk.index), fk.short_hand_key)) #%s' of entity '%s', but not specified!" % (fk.name, str(fk.index), fk.short_hand_key)) Formats the expiration date/time of the certificate. Return the number of days until the certificate expires.         If the certificate is already expired a negative number is returned. # clear existing certificate infos # set certificate infos