#!/usr/bin/perl
# Show DKIM enable / disable form, domain and selector inputs

require './virtual-server-lib.pl';
&can_edit_templates() || &error($text{'dkim_ecannot'});
&ui_print_header(undef, $text{'dkim_title'}, "", "dkim");
&ReadParse();

# Check if can use
$err = &check_dkim();
if ($err) {
	print &text('dkim_failed', $err),"<p>\n";
	if (&can_install_dkim()) {
		print &ui_form_start("install_dkim.cgi");
		print &text('dkim_installdesc'),"<p>\n";
		print &ui_form_end([ [ undef, $text{'dkim_install'} ] ]);
		}
	&ui_print_footer("", $text{'index_return'});
	return;
	}

# Show form to enable
print &ui_form_start("enable_dkim.cgi");
print &ui_table_start($text{'dkim_header'}, "width=100%", 2);

# Enabled?
$dkim = &get_dkim_config();
print &ui_table_row($text{'dkim_enabled'},
	&ui_yesno_radio("enabled", $dkim && $dkim->{'enabled'}));

# Selector for record
if ($dkim && $dkim->{'enabled'}) {
	# Selector is fixed
	print &ui_table_row($text{'dkim_selector'},
		"<tt>$dkim->{'selector'}</tt>");
	print &ui_hidden("selector", $dkim->{'selector'});
	}
else {
	# New selector input
	$defsel = &get_default_dkim_selector();
	print &ui_table_row($text{'dkim_selector'},
		&ui_textbox("selector",
			    $dkim && $dkim->{'selector'} || $defsel, 20));
	}

# Verify incoming email?
print &ui_table_row($text{'dkim_verify'},
	&ui_yesno_radio("verify", $dkim->{'verify'}));

# Force new private key
if ($dkim && $dkim->{'keyfile'} && -r $dkim->{'keyfile'}) {
	print &ui_table_row($text{'dkim_makenewkey'},
		&ui_yesno_radio("newkey", 0));
	}

# New key size
print &ui_table_row($text{'dkim_size'},
	&ui_textbox("size", $dkim->{'size'} || 2048, 5).
	" ".$text{'dkim_bits'});

# Sign for all domains, or just those with email?
print &ui_table_row($text{'dkim_alldns'},
	&ui_radio("alldns", $dkim->{'alldns'},
		   [ [ 0, $text{'dkim_alldns0'}."<br>" ],
		     [ 1, $text{'dkim_alldns1'}."<br>" ],
		     [ 3, $text{'dkim_alldns3'}."<br>" ],
		     [ 2, $text{'dkim_alldns2'} ] ]));

# Additional domains to sign for, defaulting to local hostname
@extra = @{$dkim->{'extra'}};
if (!@extra && (!$dkim || !$dkim->{'enabled'})) {
	@extra = &unique(&get_system_hostname(),
			 &get_system_hostname(1));
	@extra = grep { $_ =~ /\./ } @extra;
	}
print &ui_table_row($text{'dkim_extra'},
	&ui_textarea("extra", join("\n", @extra), 5, 80));

print &ui_table_end();

# Get domains for which signing is currently active
if ($dkim && $dkim->{'enabled'}) {
	my @dnames = &get_dkim_domains($dkim);
	print &ui_hidden_table_start($text{'dkim_header3'}, "width=100%",
				     2, 'domains');

	my @grid;
	foreach my $dname (@dnames) {
		my $d = &get_domain_by("dom", $dname);
		push(@grid, $d ? &ui_link("summary_domain.cgi?dom=$d->{'id'}",
					  &show_domain_name($d)) : $dname);
		}
	print &ui_table_row(undef, &ui_grid_table(\@grid, 4, 100), 2);

	print &ui_hidden_table_end('domains');
	}

# Public key and DNS record, for offsite DNS domains
if ($dkim && $dkim->{'enabled'}) {
	print &ui_hidden_table_start($text{'dkim_header2'}, "width=100%",
				     2, 'keys');

	$privkey = &get_dkim_privkey($dkim);
	print &ui_table_row($text{'dkim_privkeypem'},
		&ui_textarea("privkey", $privkey, 8, 80, "hard",
			     undef, "readonly=true"));
	
	$pubkey = &get_dkim_pubkey($dkim);
	print &ui_table_row($text{'dkim_pubkeypem'},
		&ui_textarea("pubkey", $pubkey, 8, 80, "hard",
			     undef, "readonly=true"));


	$dnskey = &get_dkim_dns_pubkey($dkim);
	$records = $dkim->{'selector'}."._domainkey IN TXT ".
		   &split_long_txt_record("\"v=DKIM1; k=rsa; t=s; p=$dnskey\"");
	print &ui_table_row($text{'dkim_records'},
		&ui_textarea("records", $records, 8, 80, "off",
			     undef, "readonly=true"));

	print &ui_hidden_table_end('keys');
	}

print &ui_form_end([ [ undef, $text{'save'} ] ]);


&ui_print_footer("", $text{'index_return'});