#!/bin/sh

# Copyright(C) 2005-2024
#
# Этот файл содержит информацию, являющуюся
# собственностью компании Крипто-Про.
#
# Любая часть этого файла не может быть скопирована,
# исправлена, переведена на другие языки,
# локализована или модифицирована любым способом,
# откомпилирована, передана по сети с или на
# любую компьютерную систему без предварительного
# заключения соглашения с компанией Крипто-Про.
#
# This is proprietary information of
# Crypto-Pro company.
#
# Any part of this file can not be copied,
# corrected, translated into other languages,
# localized or modified by any means,
# compiled, transferred over a network from or to
# any computer system without preliminary
# agreement with Crypto-Pro company

WIDTH=78
HEIGHT=20

# Exit codes.
SUCCESS=0
FAILURE=1
PACKAGES_NOT_AVAILABLE=2

localize() {
    if test "$LANG" = "ru_RU.UTF-8" || test "$LANG" = "ru_RU.utf8"; then
        PRODUCT_NAME="КриптоПро CSP"
	TITLE="Установщик ${PRODUCT_NAME}"
	BUTTON_next="Далее"
	BUTTON_exit="Выход"
	BUTTON_yes="Да"
	BUTTON_no="Нет"
	BUTTON_back="Назад"
	BUTTON_cancel="Отмена"
	BUTTON_enter_license="Ввести лицензию"
	BUTTON_later="Позже"
	BUTTON_install="Установить"
	BUTTON_reinstall="Переустановить"
	BUTTON_uninstall="Удалить"
	BUTTON_enter_serial="Ввести"
	BUTTON_select="Выбрать"
	BUTTON_add="Добавить"

	MENU_reinstall="Переустановить пакеты ${PRODUCT_NAME}"
	MENU_uninstall="Удалить пакеты ${PRODUCT_NAME}"
	MENU_license="Ввести или проверить лицензию"

	SHORT_kc1="Криптопровайдер KC1"
	SHORT_kc2="Провайдер KC2 (только по необходимости)"
	SHORT_gui="Графические диалоги"
	SHORT_readers="Поддержка токенов и смарт-карт"
	SHORT_cptools="cptools, многоцелевое графическое приложение"
	SHORT_stunnel="stunnel, SSL/TLS туннель с поддержкой ГОСТ"
	SHORT_pkcs11="Библиотека PKCS #11 (для gosuslugi.ru)"
	SHORT_import_ca="Импортировать корневые сертификаты из ОС"
	SHORT_plugin="Браузерный плагин + CAdES"
	SHORT_browser="Яндекс.Браузер"
	DESCR_kc1="Криптопровайдер KC1"
	DESCR_kc2="Криптопровайдер KC2"

        TEXT_token_found="Найдены устройства PC/SC: для установки отмечены пакеты для их поддержки."
	TEXT_need_root="
Для работы установщика требуются привилегии администратора"
	TEXT_need_seed="
Для завершения настройки требуется инициализировать состояние случайными данными"
	TEXT_main_menu="Добро пожаловать в мастер установки ${PRODUCT_NAME}

Мастер установки позволит установить, переустановить и удалить ${PRODUCT_NAME} с компьютера. Нажмите $BUTTON_next для продолжения или $BUTTON_exit для выхода из мастера установки."
	TEXT_install_confirmation_head="Будут установлены:
"
	TEXT_install_confirmation_tail="Нажмите $BUTTON_install, чтобы начать установку. Чтобы вернуться и изменить настройки, нажмите $BUTTON_back."
	TEXT_select_packages="Выберите набор для установки.

Не устанавливайте пакеты без необходимости: это усложнит настройку и может снизить производительность."
	TEXT_reinstall_cut="
Эти пакеты будут удалены. Продолжить переустановку?"
	TEXT_reinstall_confirm="Переустановить ${PRODUCT_NAME}

Вы выбрали переустановить текущую установку ${PRODUCT_NAME}.

Нажмите $BUTTON_reinstall, чтобы переустановить ${PRODUCT_NAME}. Если вы хотите проверить или изменить настройки установки, нажмите $BUTTON_back."
	TEXT_uninstall_confirm="Удаление ${PRODUCT_NAME}

Вы выбрали удалить ${PRODUCT_NAME} с компьютера.

Нажмите $BUTTON_uninstall, чтобы удалить ${PRODUCT_NAME} с компьютера. Если вы хотите проверить или изменить настройки установки, нажмите $BUTTON_back."
	TEXT_wrong_packages="Должен быть выбран хотя бы один из этих пакетов:

* $DESCR_kc1
* $DESCR_kc2"
	TEXT_wrong_gui="При установке компонента

* $SHORT_plugin

необходимо также устанавливать компонент

* $SHORT_gui"
	TEXT_set_license="Хотите ввести лицензионный ключ сейчас или сделать это позже?"
	TEXT_license_ok="Лицензия успешно проверена
"
	TEXT_license_bad="Ошибка проверки лицензии
"
	TEXT_license_enter="
Введите серийный номер лицензии:"
	TEXT_license_set="Лицензия установлена
"
	TEXT_license_notset="Ошибка при установке лицензии
"
	TEXT_choose_activity="Выберите операцию, которую нужно выполнить."

	ERROR_root="Ошибка: этот скрипт надо запускать от имени root или с помощью sudo"
    else	
        PRODUCT_NAME="CryptoPro CSP"
	TITLE="${PRODUCT_NAME} Setup"
	BUTTON_next="Next"
	BUTTON_exit="Exit"
	BUTTON_yes="Yes"
	BUTTON_no="No"
	BUTTON_back="Back"
	BUTTON_cancel="Cancel"
	BUTTON_enter_license="Enter the license now"
	BUTTON_later="Later"
	BUTTON_install="Install"
	BUTTON_reinstall="Reinstall"
	BUTTON_uninstall="Uninstall"
	BUTTON_enter_serial="Enter"
	BUTTON_select="Select"
	BUTTON_add="Add"

	MENU_reinstall="Reinstall ${PRODUCT_NAME} packages"
	MENU_uninstall="Uninstall ${PRODUCT_NAME} packages"
	MENU_license="Enter or check license"

	SHORT_kc1="KC1 Cryptographic Service Provider"
	SHORT_kc2="KC2 Provider (skip if not sure)"
	SHORT_gui="GUI dialogs component"
	SHORT_readers="Smart Card and Token support modules"
	SHORT_cptools="cptools, GUI application for various tasks"
	SHORT_stunnel="stunnel, SSL/TLS tunnel with GOST support"
	SHORT_pkcs11="PKCS #11 library (for gosuslugi.ru)"
	SHORT_import_ca="Import OS root certificates into CSP"
	SHORT_plugin="Browser plugin + CAdES"
	SHORT_browser="Yandex.Browser"
	DESCR_kc1="KC1 Cryptographic Service Provider"
	DESCR_kc2="KC2 Cryptographic Service Provider"

        TEXT_token_found="Some PC/SC devices found: support packages added to install list."
	TEXT_need_root="
Administrator privileges are required for installer"
	TEXT_need_seed="
You shall initialize state with random data to complete setup"
     	TEXT_main_menu="Welcome to the ${PRODUCT_NAME} Setup Wizard

The Setup Wizard will allow you to install, reinstall or remove ${PRODUCT_NAME} from your computer. Click $BUTTON_next to continue or $BUTTON_exit to exit the Setup Wizard."
	TEXT_install_confirmation_head="The following features will be installed:
"
	TEXT_install_confirmation_tail="Click $BUTTON_install to begin the installation. If you want to change your installation settings, click $BUTTON_back."
	TEXT_select_packages="Select the way you want features to be installed.

Do not install unnecessary items: it will make configuration difficult and may impact performance."
	TEXT_reinstall_cut="
These packages will be removed. Proceed with the reinstallation?"
	TEXT_reinstall_confirm="Reinstall ${PRODUCT_NAME}

You have chosen to reinstall your current ${PRODUCT_NAME} installation.

Click $BUTTON_reinstall to reinstall ${PRODUCT_NAME}. If you want to review or change any of your installation changes, click $BUTTON_back."
	TEXT_uninstall_confirm="Uninstall ${PRODUCT_NAME}

You have chosen to uninstall the program from your computer.

Click $BUTTON_uninstall to uninstall ${PRODUCT_NAME} from your computer. If you want to review or change any of your installation changes, click $BUTTON_back."
	TEXT_wrong_packages="At least one of the following packages must be selected:

* $DESCR_kc1
* $DESCR_kc2"
	TEXT_wrong_gui="If you want to install

* $SHORT_plugin

you shall also install

* $SHORT_gui"
	TEXT_set_license="Would you like to enter the license now, or postpone it for a while?"
	TEXT_license_ok="License check success
"
	TEXT_license_bad="License check error
"
	TEXT_license_enter="
Enter license serial number:"
	TEXT_license_set="License was set
"
	TEXT_license_notset="Error setting license
"
	TEXT_choose_activity="Select the operation you wish to perform."

	ERROR_root="Error: this script must be run as root or via sudo"
    fi
}

test_whiptail_and_scripts() {
    if ! command -v whiptail >/dev/null 2>&1 ; then
        echo "Error: whiptail wasn't found" >&2
        if [ -f /etc/debian_version ] ||
           [ -f /etc/mcst_version ] ||
            grep Ubuntu /etc/lsb-release >/dev/null 2>&1
        then
            echo "Please run 'sudo apt-get install whiptail'" >&2
        elif [ -f /etc/altlinux-release ] ; then
            echo "Please run 'sudo apt-get install newt52'" >&2
        else
            echo "Please run 'sudo yum install newt'" >&2
        fi
        exit "${FAILURE}"
    fi
    if ! ls ./install.sh ./uninstall.sh > /dev/null 2>&1 ; then
        echo "Error: necessary scripts were not found"
        exit "${FAILURE}"
    fi
    # shellcheck disable=SC2016
    if ! grep '"$1" = "--list"' ./uninstall.sh > /dev/null 2>&1 ; then
        echo "Error: uninstall script doesn't support querying packages"
        exit "${FAILURE}"
    fi
    if ! grep 'from-repo' ./install.sh > /dev/null 2>&1 ; then
        echo "Error: install script doesn't support installing from repository"
        exit "${FAILURE}"
    fi
}

check_license() {
    license="$(/opt/cprocsp/sbin/"${ARCH}"/cpconfig -license -view 2>&1)"
    if [ "$?" -eq "${SUCCESS}" ] ; then
        license_output="$TEXT_license_ok
${license}"
    else
        license_output="$TEXT_license_bad
${license}"
    fi
}

ask_about_license() {
    whiptail --title "$TITLE" \
        --yesno "$TEXT_set_license" \
        --yes-button "$BUTTON_enter_license" --no-button "$BUTTON_later" \
        "${HEIGHT}" "${WIDTH}" 
    if [ "$?" -ne "${SUCCESS}" ] ; then
        choose_activity${FROM_REPO_FUNC}
        return
    fi
    check_license
    license_menu
}

install_notification() {
    whiptail --title "$TITLE" \
        --msgbox "${install_log}" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    if [ "${install_status}" -eq "${SUCCESS}" ] ; then
        if test -n "$CPRO_INSTALL_NO_LICENSE" ; then
            exit_success
        else
            ask_about_license
        fi
    else
        main_menu
    fi
}

guess_need_tokens() {
    type lsusb > /dev/null 2>&1 || return 1
    lsusb 2>&1|grep -q '0a89:\|2022:\|24dc:\|2ce4:\|2fb0:' && echo "$TEXT_token_found" && return 0
    return 1
}

wrong_packages() {
    wrong_msg=$*
    whiptail --title "$TITLE" \
        --msgbox "$wrong_msg" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    select_packages${SUITE}
}

install_confirmation_rich() {
    whiptail --title "$TITLE" \
        --yesno "$TEXT_install_confirmation_head
${feature_descriptions}
$TEXT_install_confirmation_tail" \
        --yes-button "$BUTTON_install" --no-button "$BUTTON_back" \
        "${HEIGHT}" "${WIDTH}" 
    if [ "$?" -ne "${SUCCESS}" ] ; then
        if test -n "$CPRO_INSTALL_FEATURE_KEYS" ; then
            exit "${SUCCESS}"
        else
            select_packages${SUITE}
            return
        fi
    fi
    packages=""
    for feature_key in ${feature_keys} ; do
        case "${feature_key}" in
            "rdr-gui-gtk")
                packages="${packages} cprocsp-rdr-gui-gtk"
                ;;
            "readers")
                packages="${packages} cprocsp-rdr-pcsc cprocsp-rdr-emv cprocsp-rdr-inpaspot cprocsp-rdr-kst cprocsp-rdr-mskey cprocsp-rdr-novacard cprocsp-rdr-edoc cprocsp-rdr-rutoken cprocsp-rdr-jacarta cprocsp-rdr-cloud cprocsp-rdr-cpfkc cprocsp-rdr-infocrypt cprocsp-rdr-rosan cprocsp-rdr-cryptoki cprocsp-rdr-rustoken"
                ;;
            "pkcs11")
                packages="${packages} lsb-cprocsp-pkcs11"
                ;;
            "import-ca-certs")
                packages="${packages} lsb-cprocsp-import-ca-certs"
                ;;
            "cades-plugin")
                packages="${packages} cprocsp-pki-cades cprocsp-pki-plugin"
                ;;
            "browser")
                browser_file=$(ls ./yandex-browser*)
                browser_file=$(basename ${browser_file})
                packages="${packages} ${browser_file}"
                ;;
            *)
                packages="${packages} ${feature_key}"
                ;;
        esac
    done
    if echo "${packages}" | grep -v kc1 | grep kc2 > /dev/null 2>&1 ; then
        kc="kc2"
    else
        kc="kc1"
    fi
    # shellcheck disable=SC2086
    install_log="$(sh ./install.sh ${FROM_REPO_OPT} ${kc} ${packages})"
    install_status="$?"
    install_notification
}

select_packages_rich() {
    TEXT_select_packages_final="$TEXT_select_packages"
    set --
    if guess_need_tokens; then
        set -- "$@" "readers" "$SHORT_readers" "ON"
	TEXT_select_packages_final="$TEXT_select_packages_final
$TEXT_token_found"
    else
        set -- "$@" "readers" "$SHORT_readers" "OFF"
    fi
    if ls ./cprocsp-pki-plugin* > /dev/null 2>&1 ; then
        set -- "$@" "cades-plugin" "$SHORT_plugin" "ON"
    fi
    if ls ./yandex-browser* > /dev/null 2>&1 ; then
        set -- "$@" "browser" "$SHORT_browser" "ON"
    fi
    if test -n "$CPRO_INSTALL_FEATURE_KEYS" ; then
	feature_keys="$CPRO_INSTALL_FEATURE_KEYS"
    else	
        feature_keys="$(
            whiptail --title "$TITLE" \
                --checklist "$TEXT_select_packages_final" \
                --ok-button "$BUTTON_next" --cancel-button "$BUTTON_exit" \
                "${HEIGHT}" "${WIDTH}" 8 --notags --separate-output \
                "lsb-cprocsp-kc1" "$SHORT_kc1" "ON" \
                "lsb-cprocsp-kc2" "$SHORT_kc2" "OFF" \
                "rdr-gui-gtk" "$SHORT_gui" "ON" \
                "cprocsp-cptools-gtk" "$SHORT_cptools" "ON" \
                "$@" \
                "pkcs11" "$SHORT_pkcs11" "ON" \
                "import-ca-certs" "$SHORT_import_ca" "OFF" \
                "cprocsp-stunnel" "$SHORT_stunnel" "OFF" \
                3>&1 1>&2 2>&3
        )"
        if [ "$?" -ne "${SUCCESS}" ] ; then
            exit "${SUCCESS}"
        fi
    fi
    count="$(echo "${feature_keys}" | grep -c 'kc[1-2]')"
    if echo "${feature_keys}" | grep 'cades-plugin' > /dev/null 2>&1 &&
       ! echo "${feature_keys}" | grep 'rdr-gui-gtk' > /dev/null 2>&1; then
        error_use_gui=1
    else
        error_use_gui=0
    fi
    if [ "${count}" -eq 0 ]; then
        wrong_packages "$TEXT_wrong_packages"
    elif [ "${error_use_gui}" -eq 1 ]; then
        wrong_packages "$TEXT_wrong_gui"
    else
        feature_descriptions=""
        for feature_key in ${feature_keys} ; do
            case "${feature_key}" in
                "lsb-cprocsp-kc1")
                    description="$DESCR_kc1"
                    ;;
                "lsb-cprocsp-kc2")
                    description="$DESCR_kc2"
                    ;;
                "rdr-gui-gtk")
                    description="$SHORT_gui"
                    ;;
                "readers")
                    description="$SHORT_readers"
                    ;;
                "cprocsp-cptools-gtk")
                    description="$SHORT_cptools"
                    ;;
                "cprocsp-stunnel")
                    description="$SHORT_stunnel"
                    ;;
                "pkcs11")
                    description="$SHORT_pkcs11"
                    ;;
                "import-ca-certs")
                    description="$SHORT_import_ca"
                    ;;
		"cades-plugin")
                    description="$SHORT_plugin"
                    ;;
		"browser")
                    description="$SHORT_browser"
                    ;;
                *)
                    description="${feature_key}"
                    ;;
            esac
            feature_descriptions="${feature_descriptions}* ${description}
"
        done
        install_confirmation${SUITE}
    fi
}

install_confirmation() {
    whiptail --title "$TITLE" \
        --yesno "$TEXT_install_confirmation_head
${feature_descriptions}
$TEXT_install_confirmation_tail" \
        --yes-button "$BUTTON_install" --no-button "$BUTTON_back" \
        "${HEIGHT}" "${WIDTH}" 
    if [ "$?" -ne "${SUCCESS}" ] ; then
        select_packages${SUITE}
        return
    fi
    packages=""
    for feature_key in ${feature_keys} ; do
        case "${feature_key}" in
            "rdr-gui-gtk")
                packages="${packages} cprocsp-rdr-gui-gtk"
                ;;
            "readers")
                packages="${packages} cprocsp-rdr-pcsc cprocsp-rdr-emv cprocsp-rdr-inpaspot cprocsp-rdr-kst cprocsp-rdr-mskey cprocsp-rdr-novacard cprocsp-rdr-edoc cprocsp-rdr-rutoken cprocsp-rdr-cloud cprocsp-rdr-cpfkc cprocsp-rdr-infocrypt cprocsp-rdr-rosan cprocsp-rdr-cryptoki cprocsp-rdr-rustoken"
                ;;
            "pkcs11")
                packages="${packages} lsb-cprocsp-pkcs11"
                ;;
            "import-ca-certs")
                packages="${packages} lsb-cprocsp-import-ca-certs"
                ;;
            *)
                packages="${packages} ${feature_key}"
                ;;
        esac
    done
    if echo "${packages}" | grep -v kc1 | grep kc2 > /dev/null 2>&1 ; then
        kc="kc2"
    else
        kc="kc1"
    fi
    # shellcheck disable=SC2086
    install_log="$(sh ./install.sh ${FROM_REPO_OPT} ${kc} ${packages})"
    install_status="$?"
    install_notification
}

select_packages() {
    feature_keys="$(
        whiptail --title "$TITLE" \
            --checklist "$TEXT_select_packages" \
            --ok-button "$BUTTON_next" --cancel-button "$BUTTON_exit" \
            "${HEIGHT}" "${WIDTH}" 7 --notags --separate-output \
            "lsb-cprocsp-kc1" "$SHORT_kc1" "ON" \
            "lsb-cprocsp-kc2" "$SHORT_kc2" "OFF" \
            "rdr-gui-gtk" "$SHORT_gui" "ON" \
            "readers" "$SHORT_readers" "OFF" \
            "pkcs11" "$SHORT_pkcs11" "ON" \
            "import-ca-certs" "$SHORT_import_ca" "OFF" \
            "cprocsp-stunnel" "$SHORT_stunnel" "OFF" \
            3>&1 1>&2 2>&3
    )"
    if [ "$?" -ne "${SUCCESS}" ] ; then
        exit "${SUCCESS}"
    fi
    count="$(echo "${feature_keys}" | grep -c 'kc[1-2]')"
    if echo "${feature_keys}" | grep 'cades-plugin' > /dev/null 2>&1 &&
       ! echo "${feature_keys}" | grep 'rdr-gui-gtk' > /dev/null 2>&1; then
        error_use_gui=1
    else
        error_use_gui=0
    fi
    if [ "${count}" -eq 0 ]; then
        wrong_packages "$TEXT_wrong_packages"
    elif [ "${error_use_gui}" -eq 1 ]; then
        wrong_packages "$TEXT_wrong_gui"
    else
        feature_descriptions=""
        for feature_key in ${feature_keys} ; do
            case "${feature_key}" in
                "lsb-cprocsp-kc1")
                    description="$DESCR_kc1"
                    ;;
                "lsb-cprocsp-kc2")
                    description="$DESCR_kc2"
                    ;;
                "rdr-gui-gtk")
                    description="$SHORT_gui"
                    ;;
                "readers")
                    description="$SHORT_readers"
                    ;;
                "cprocsp-stunnel")
                    description="$SHORT_stunnel"
                    ;;
                "pkcs11")
                    description="$SHORT_pkcs11"
                    ;;
                "import-ca-certs")
                    description="$SHORT_import_ca"
                    ;;
            esac
            feature_descriptions="${feature_descriptions}* ${description}
"
        done
        install_confirmation${SUITE}
    fi
}

reinstall_notification() {
    whiptail --title "$TITLE" \
        --msgbox "${reinstall_log}" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    choose_activity${FROM_REPO_FUNC}
}

reinstall_cut_package_list() {
    whiptail --title "$TITLE" \
        --yesno "${reinstall_log}
$TEXT_reinstall_cut" \
        --yes-button "$BUTTON_yes" --no-button "$BUTTON_no" \
        "${HEIGHT}" "${WIDTH}" 
    if [ "$?" -ne "${SUCCESS}" ] ; then
        choose_activity${FROM_REPO_FUNC}
        return
    fi
    # shellcheck disable=SC2063
    unavailable="$(echo "${reinstall_log}" | grep '^*' | sed 's/*//' | xargs)"
    tail_packages_re='cprocsp-pki-plugin'
    packages_head="$(echo "${packages}" "${unavailable}" | xargs -n1 | grep -v "$tail_packages_re" | sort | uniq -u | xargs)"
    packages_tail="$(echo "${packages}" "${unavailable}" | xargs -n1 | grep "$tail_packages_re" | sort | uniq -u | xargs)"
    packages="$packages_head $packages_tail"
    # shellcheck disable=SC2086
    reinstall_log="$(sh ./install.sh ${FROM_REPO_OPT} ${kc} ${packages})"
    reinstall_notification
}

reinstall_confirmation() {
    whiptail --title "$TITLE" \
        --yesno "$TEXT_reinstall_confirm" \
        --yes-button "$BUTTON_reinstall" --no-button "$BUTTON_back" \
        "${HEIGHT}" "${WIDTH}" --defaultno
    if [ "$?" -ne "${SUCCESS}" ] ; then
        choose_activity${FROM_REPO_FUNC}
        return
    fi
    packages="$(sh ./uninstall.sh --list | grep -v compat | xargs)"
    if echo "${packages}" | grep -v kc1 | grep kc2 > /dev/null 2>&1 ; then
        kc="kc2"
    else
        kc="kc1"
    fi
    tail_packages_re='cprocsp-pki-plugin'
    packages_by_file_re='yandex-browser'
    packages_head="$(echo "${packages}" | xargs -n1 | grep -v "$tail_packages_re" | grep -v "$packages_by_file_re" | sort | uniq -u | xargs)"
    packages_tail="$(echo "${packages}" | xargs -n1 | grep "$tail_packages_re" | sort | uniq -u | xargs)"
    if echo "${packages}" | grep "$packages_by_file_re" > /dev/null 2>&1 ; then
        package_files="$(ls | grep "$packages_by_file_re")"
    fi
    packages="$packages_head $packages_tail $package_files"

    # shellcheck disable=SC2086
    reinstall_log="$(sh ./install.sh ${FROM_REPO_OPT} ${kc} ${packages})"
    reinstall_status="$?"
    if [ "${reinstall_status}" -eq "${PACKAGES_NOT_AVAILABLE}" ] ; then
        reinstall_cut_package_list
    else
        reinstall_notification
    fi
}

uninstall_notification() {
    whiptail --title "$TITLE" \
        --msgbox "${uninstall_log}" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    main_menu
}

uninstall_confirmation() {
    whiptail --title "$TITLE" \
        --yesno "$TEXT_uninstall_confirm" \
        --yes-button "$BUTTON_uninstall" --no-button "$BUTTON_back" \
        "${HEIGHT}" "${WIDTH}" --defaultno
    if [ "$?" -ne "${SUCCESS}" ] ; then
        choose_activity${FROM_REPO_FUNC}
        return
    fi
    uninstall_log="$(sh ./uninstall.sh)"
    uninstall_notification
}

input_license_finished() {
    whiptail --title "$TITLE" \
        --msgbox "${license_output}" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    choose_activity${FROM_REPO_FUNC}
}

license_menu() {
    serial_number="$(
        whiptail --title "$TITLE" \
            --inputbox "${license_output}
$TEXT_license_enter" \
            --ok-button "$BUTTON_enter_serial" --cancel-button "$BUTTON_cancel" \
            "${HEIGHT}" "${WIDTH}" \
            3>&1 1>&2 2>&3
    )"
    if [ "$?" -ne "${SUCCESS}" ] ; then
        choose_activity${FROM_REPO_FUNC}
        return
    fi
    license="$(/opt/cprocsp/sbin/"${ARCH}"/cpconfig -license -set "${serial_number}" 2>&1)"
    if [ "$?" -eq "${SUCCESS}" ] ; then
        license_output="$TEXT_license_set
${license}"
    else
        license_output="$TEXT_license_notset
${license}"
    fi
    input_license_finished
}

rmrepo_notification() {
    whiptail --title "$TITLE" \
        --msgbox "CryptoPro packages and repository have been removed" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    main_menu
}

rmrepo_confirmation() {
    whiptail --title "$TITLE" \
        --yesno "Uninstall ${PRODUCT_NAME} packages and repository

Click Uninstall to uninstall ${PRODUCT_NAME} and remove the ${PRODUCT_NAME} repository from your computer. If you want to review or change any of your installation changes, click Back." \
        --yes-button "$BUTTON_uninstall" --no-button "$BUTTON_back" \
        "${HEIGHT}" "${WIDTH}" --defaultno
    if [ "$?" -ne "${SUCCESS}" ] ; then
        choose_activity${FROM_REPO_FUNC}
        return
    fi
    sh ./uninstall.sh
    sed -i '/cryptopro/d' /etc/apt/sources.list
    for _source in /etc/apt/sources.list.d/* ; do
        sed -i '/cryptopro/d' "${_source}"
    done
    [ -s /etc/apt/sources.list.d/cprocsp.list ] || rm -f /etc/apt/sources.list.d/cprocsp.list
    apt-key del "$(apt-key list | grep -B 1 CryptoPro | head -1)"
    apt-get update
    rmrepo_notification
}

choose_activity() {
    set --
    if test -z "$CPRO_INSTALL_NO_LICENSE" ; then
        set -- "License" "$MENU_license"
    fi
    choice="$(
        whiptail --title "$TITLE" \
            --menu "$TEXT_choose_activity" \
            --ok-button "$BUTTON_select" --cancel-button "$BUTTON_exit" \
            "${HEIGHT}" "${WIDTH}" 3 --notags\
            "Reinstall" "$MENU_reinstall" \
            "Uninstall" "$MENU_uninstall" \
            "$@" \
            3>&1 1>&2 2>&3
    )"
    if [ "$?" -ne "${SUCCESS}" ] ; then
        exit_success
    fi
    case "${choice}" in
        "Reinstall")
            reinstall_confirmation
            ;;
        "Uninstall")
            uninstall_confirmation
            ;;
        "License")
            check_license
            license_menu
            ;;
    esac
}

choose_activity_from_repo() {
    choice="$(
        whiptail --title "$TITLE" \
            --menu "$TEXT_choose_activity" \
            --ok-button "$BUTTON_select" --cancel-button "$BUTTON_exit" \
            "${HEIGHT}" "${WIDTH}" 4 --notags\
            "Reinstall" "$MENU_reinstall" \
            "Uninstall" "$MENU_uninstall" \
            "Rmrepo" "Uninstall ${PRODUCT_NAME} and remove CSP repository" \
            "License" "$MENU_license" \
            3>&1 1>&2 2>&3
    )"
    if [ "$?" -ne "${SUCCESS}" ] ; then
        exit_success
    fi
    case "${choice}" in
        "Reinstall")
            reinstall_confirmation
            ;;
        "Uninstall")
            uninstall_confirmation
            ;;
        "Rmrepo")
            rmrepo_confirmation
            ;;
        "License")
            check_license
            license_menu
            ;;
    esac
}

add_repo_notification() {
    whiptail --title "$TITLE" \
        --msgbox "${add_repo_notification}" \
        --ok-button "Ok" \
        "${HEIGHT}" "${WIDTH}"
    if [ "${add_repo_status}" -ne "${SUCCESS}" ] ; then
        sed -i '/cryptopro/d' /etc/apt/sources.list
        for _source in /etc/apt/sources.list.d/* ; do
            sed -i '/cryptopro/d' "${_source}"
        done
        [ -s /etc/apt/sources.list.d/cprocsp.list ] || rm -f /etc/apt/sources.list.d/cprocsp.list
        if apt-key list | grep -B 1 CryptoPro >/dev/null 2>&1 ; then
            apt-key del "$(apt-key list | grep -B 1 CryptoPro | head -1)"
            apt-get update
        fi
        add_repository
        return
    fi
    if [ "$(sh ./uninstall.sh --list | wc -w)" -eq 0 ] ; then
        select_packages${SUITE}
    else
        choose_activity${FROM_REPO_FUNC}
    fi
}

ask_password() {
    password="$(
        whiptail --title "$TITLE" \
            --passwordbox "Enter your password:" \
            --ok-button "$BUTTON_enter_serial" --cancel-button "$BUTTON_cancel" \
            "${HEIGHT}" "${WIDTH}" \
            3>&1 1>&2 2>&3
    )"
    if [ "$?" -ne "${SUCCESS}" ] ; then
        add_repository
        return
    fi
    KEY_URL=https://www.cryptopro.ru/sites/default/files/products/csp/cryptopro_key.pub
    if command -v wget >/dev/null 2>&1 ; then
        wget -q -O - $KEY_URL | apt-key add -
        add_repo_status="$?"
    elif command -v curl >/dev/null 2>&1 ; then
        curl $KEY_URL | apt-key add -
        add_repo_status="$?"
    elif ls /opt/cprocsp/bin/*/curl >/dev/null 2>&1 ; then
        CPCURL=$(ls /opt/cprocsp/bin/*/curl|head -1)
        $CPCURL $KEY_URL | apt-key add -
        add_repo_status="$?"
    else
        add_repo_status=1
	add_repo_notification="You need curl or wget to setup repository"
	add_repo_notification
	return
    fi
    if [ "${add_repo_status}" -ne "${SUCCESS}" ] ; then
	add_repo_notification="Failed to add repository key"
	add_repo_notification
	return
    fi
    echo "deb https://${username}:${password}@cryptopro.ru/repo/deb 5.0-unstable main" > /etc/apt/sources.list.d/cprocsp.list
    apt-get update
    add_repo_status="$?"
    [ "${add_repo_status}" -eq "${SUCCESS}" ] && add_repo_notification="CryptoPro repository has been added" || add_repo_notification="Failed to add CryptoPro repository. Check your username and password"
    add_repo_notification
}

ask_username() {
    username="$(
        whiptail --title "$TITLE" \
            --inputbox "Enter your username:" \
            --ok-button "$BUTTON_enter_serial" --cancel-button "$BUTTON_cancel" \
            "${HEIGHT}" "${WIDTH}" \
            3>&1 1>&2 2>&3
    )"
    if [ "$?" -ne "${SUCCESS}" ] ; then
        add_repository
        return
    fi
    ask_password
}

add_repository() {
    whiptail --title "$TITLE" \
        --yesno "You have chosen the installation from a repository which have not been added yet.

Would you like to add the repository now?" \
        --yes-button "$BUTTON_add" --no-button "$BUTTON_exit" \
        "${HEIGHT}" "${WIDTH}" 
    if [ "$?" -ne "${SUCCESS}" ] ; then
        exit "${SUCCESS}"
    fi
    ask_username
}

main_menu() {
    whiptail --title "$TITLE" \
        --yesno "$TEXT_main_menu" \
        --yes-button "$BUTTON_next" --no-button "$BUTTON_exit" \
        "${HEIGHT}" "${WIDTH}" 
    if [ "$?" -ne "${SUCCESS}" ] ; then
        exit_success
    fi
    if [ "${FROM_REPO_OPT}" = "--from-repo" ] ; then
        if ! grep cryptopro /etc/apt/sources.list > /dev/null 2>&1 &&
            ! grep -r cryptopro /etc/apt/sources.list.d/ > /dev/null 2>&1
        then
            add_repository
            return
        fi
    fi
    if [ "$(sh ./uninstall.sh --list | wc -w)" -eq 0 ] ; then
        select_packages${SUITE}
    else
        choose_activity${FROM_REPO_FUNC}
    fi
}

guess_user_name() {
    if test -z "$CPRO_BIO_USER" && test "$(id -u)" -ne 0 ; then
	CPRO_BIO_USER=$(id -nu)
	[ "$CPRO_BIO_USER" = "root" ] && CPRO_BIO_USER=
    fi
    if test -z "$CPRO_BIO_USER" && test -n "$SUDO_USER" ; then
	CPRO_BIO_USER=$SUDO_USER
	[ "$CPRO_BIO_USER" = "root" ] && CPRO_BIO_USER=
    fi 
    if test -z "$CPRO_BIO_USER" && test -n "$SUDO_UID" ; then
	CPRO_BIO_USER=$(id -nu "$SUDO_UID")
	[ "$CPRO_BIO_USER" = "root" ] && CPRO_BIO_USER=
    fi 
    if test -z "$CPRO_BIO_USER" && test -n "$USER" ; then
	CPRO_BIO_USER=$USER
	[ "$CPRO_BIO_USER" = "root" ] && CPRO_BIO_USER=
    fi 
    if test -z "$CPRO_BIO_USER" && test -n "$LOGNAME" ; then
	CPRO_BIO_USER=$LOGNAME
	[ "$CPRO_BIO_USER" = "root" ] && CPRO_BIO_USER=
    fi 
}

init_seed() {
    CPCONFIG_PROG=$(ls /opt/cprocsp/sbin/*/cpconfig 2>/dev/null|head -1)
    CSPTEST_PROG=$(ls /opt/cprocsp/bin/*/csptest 2>/dev/null|head -1)
    if test -n "$CPCONFIG_PROG" && test -n "$CSPTEST_PROG" ; then
        MIN_WINDOW_TIME=3
	RUN_CMD="$CPCONFIG_PROG -ini '\local\Random\RootRandomSeed' -view >/dev/null 2>&1 || ( \
echo \"$TEXT_need_seed\"; \
start_time=\$(date +%s); \
$CSPTEST_PROG -keyset -verifycontext -hard_rng && exit 0; \
stop_time=\$(date +%s); \
echo \"\$start_time __ \$stop_time\"; \
if [ \$(expr \$stop_time - \$start_time) -lt $MIN_WINDOW_TIME ]; then \
DISPLAY= $CSPTEST_PROG -keyset -verifycontext -hard_rng && exit 0; \
fi; \
)"
	su "$CPRO_BIO_USER" -c "$RUN_CMD"
    fi
}

exit_success() {
    test -n "$CPRO_BIO_USER" && init_seed
    exit "${SUCCESS}"
}

main() {
    localize
    guess_user_name
    if [ "$(id -u)" -ne 0 ] ; then
	if test -n "$CPRO_INSTALL_NO_ELEVATE" ; then
            echo "$ERROR_root"
            exit "${FAILURE}"
        fi
	echo "$TEXT_need_root"
	if command -v sudo > /dev/null 2>&1 && sudo -v ; then
	    exec sudo CPRO_INSTALL_NO_ELEVATE=1 CPRO_BIO_USER="$CPRO_BIO_USER" CPRO_INSTALL_FEATURE_KEYS="$CPRO_INSTALL_FEATURE_KEYS" CPRO_INSTALL_NO_LICENSE="$CPRO_INSTALL_NO_LICENSE" "$0" "$@" 
        else
	    if test -f /etc/altlinux-release ; then
		# TODO: https://bugzilla.altlinux.org/23700
		CPRO_INSTALL_NO_ELEVATE=1 CPRO_BIO_USER="$CPRO_BIO_USER" CPRO_INSTALL_FEATURE_KEYS="$CPRO_INSTALL_FEATURE_KEYS" CPRO_INSTALL_NO_LICENSE="$CPRO_INSTALL_NO_LICENSE" exec su root -c "$0"
	    else
		CPRO_INSTALL_NO_ELEVATE=1 CPRO_BIO_USER="$CPRO_BIO_USER" CPRO_INSTALL_FEATURE_KEYS="$CPRO_INSTALL_FEATURE_KEYS" CPRO_INSTALL_NO_LICENSE="$CPRO_INSTALL_NO_LICENSE" exec su root -c '"$0" "$@"' -- "$0" "$@"
	    fi
	fi
    fi
    cd "$(dirname "$0")" || exit "$?"
    test_whiptail_and_scripts
    case "$(uname -m)" in
        "x86_64"|"amd64")
            ARCH="amd64"
            ;;
        "i386"|"i486"|"i586"|"i686")
            ARCH="ia32"
            ;;
        "ppc64"|"ppc64le")
            ARCH="$(uname -m)"
            ;;
        arm*)
            ARCH="arm"
            ;;
        aarch64)
            ARCH="aarch64"
            ;;
        e2k)
            ARCH="e2k64"
            ;;
        "mips")
            ARCH="mipsel"
            ;;
        *)
            echo "Error: unsupported platform:" $(uname -m)
            exit "${FAILURE}"
            ;;
    esac
    case "$(uname -m)" in
        "x86_64"|"amd64"|"i386"|"i486"|"i586"|"i686"|arm*|aarch64|e2k)
            SUITE="_rich"
            ;;
        *)
            SUITE=""
            ;;
    esac
    if [ "$1" = "--from-repo" ] ; then
        FROM_REPO_OPT="--from-repo"
        FROM_REPO_FUNC="_from_repo"
    else
        FROM_REPO_OPT=""
        FROM_REPO_FUNC=""
    fi
    main_menu
}

main "$@"