local datetime_parse = require"util.datetime".parse;

local load_cert = ssl.x509 and ssl.x509.load;

-- These are in days.

local nag_time = module:get_option_number("checkcerts_notify", 7) * 86400;

local pat = "^([JFMAONSD][ceupao][glptbvyncr])  ?(%d%d?) (%d%d):(%d%d):(%d%d) (%d%d%d%d) GMT$";

local months = {Jan=1,Feb=2,Mar=3,Apr=4,May=5,Jun=6,Jul=7,Aug=8,Sep=9,Oct=10,Nov=11,Dec=12};

local function parse_x509_datetime(s)

	local month, day, hour, min, sec, year = s:match(pat); month = months[month];

	return datetime_parse(("%04d-%02d-%02dT%02d:%02d:%02dZ"):format(year, month, day, hour, min, sec));

end

local timeunits = {"minute",60,"hour",3600,"day",86400,"week",604800,"month",2629746,"year",31556952,};

local function humantime(timediff)

	local ret = {};

	for i=#timeunits,2,-2 do

		if timeunits[i] < timediff then

			local n = math.floor(timediff / timeunits[i]);

			if n > 0 and #ret < 2 then

				ret[#ret+1] = ("%d %s%s"):format(n, timeunits[i-1], n ~= 1 and "s" or "");

				timediff = timediff - n*timeunits[i];

			end

		end

	end

	return table.concat(ret, " and ")

end

	local ssl_config = config.rawget(module.host, "ssl");

		ssl_config = config.get(base_host, "ssl");

	if ssl_config and ssl_config.certificate then

		fh = fh and fh:close();

		local cert = cert and load_cert(cert); -- And parse

		if not cert then

			module:log("warn", "No certificate configured for this host, please fix this and reload this module to check expiry");

			return

		end

		local expires_at = parse_x509_datetime(cert:notafter());

		local expires_in = os.difftime(expires_at, now);

		local fmt =  "Certificate %s expires in %s"

		local nag_admin = expires_in < nag_time;

		local log_warn = expires_in < nag_time * 2;

		local timediff = expires_in;

		if expires_in < 0 then

			fmt =  "Certificate %s expired %s ago";

			timediff = -timediff;

		end

		timediff = humantime(timediff);

		module:log(log_warn and "warn" or "info", fmt, certfile, timediff);

		if nag_admin then

			local body = fmt:format("for host ".. module.host, timediff);

				module:send(st.message({ from = module.host, to = admin, type = "chat" }, body));

		return math.max(86400, expires_in / 3);

module:add_timer(1, check_certs_validity);