program gpggraph;

{$R *.res}

uses
  mystringlistunit, classes, sysutils, graphunit, lowlevelunit;

const
  gpgCommand = 'gpg --no-auto-check-trustdb --fast-list-mode --fixed-list-mode';

var
  lKeys,kKeys:   tMyStringList;
  baum:          tKnotens;
  wurzel:        tKnoten;
  spitzen:       array of tKnoten;
  i,j,k:         longint;
  cK:            tKnoten;
  s:             string;
  f:             textfile;

begin
  lKeys:=tMyStringList.create;
  kKeys:=tMyStringList.create;

  write('Kernel-Schlüssel inkl. Signaturen laden ...');
  kKeys.loadFromPipe(gpgCommand+' --list-sigs --homedir /var/cache/kernelKeys/.gnupg');

  write(' und bereinigen ...');
  kKeys.grep('^(pub|sig)');

  write(' und umformen ...');
  kKeys.replace('^pub .*/([0-9A-F]{8}) .*$','pub $1');
  kKeys.replace('^sig .* ([0-9A-F]{8}) .*$','sig $1');

  write(' und noch mal bereinigen ...');
  kKeys.uniq('-');

  write(' und in Graphen umwandeln ...');
  baum:=tKnotens.create;
  i:=0;
  j:=0;
  while i<kKeys.count do begin
    if leftStr(kKeys[i],4)='pub ' then begin
      inc(j);
      if j>=500 then begin
        write('.');
        j:=0;
      end;
      if rightStr(kKeys[i],8)='65D0FD58' then begin
        inc(i);
        continue;
      end;
      cK:=baum.findeKnoten(rightStr(kKeys[i],8));
      inc(i);
      while (i<kKeys.count) and (leftStr(kKeys[i],4)='sig ') do begin
        cK.addSig(baum,rightStr(kKeys[i],8));
        inc(i);
      end;
    end
    else
      inc(i);
  end;

  kKeys.clear;

  writeln(' fertig');
  write('lokale Schlüssel laden ...');

  lKeys.loadFromPipe(gpgCommand+' --list-keys');
  lKeys.grep('^pub');
  lKeys.replace('^\S+\s+[^ /]+/([0-9A-F]{8}) .*$','0x$1');
  lKeys.sort;
  lKeys.uniq('-');

  write(' und Kernel-Schlüssel laden ...');

  baum.gibAlles(kKeys);

  write(' und Duplikate finden ...');

  lKeys.append(kKeys);
  kKeys.clear;

  lKeys.sort;
  lKeys.uniq('d');

  lKeys.grep('^0x(CAFAA3E1|00411886|76E21CBB|65D0FD58|329DD07E|4FF14263|BA50A935|CB944925)$',true); // ignoriere diese Schlüssel lokal, weil ich den Leuten nicht (direkt) vertraue

  kKeys.loadFromPipe(gpgCommand+' --list-keys '+lKeys.text);
  lKeys.clear;
  kKeys.grep('^pub');
  kKeys.grep('expired|revoked',true);
  kKeys.replace('^\S+\s+[^ /]+/([0-9A-F]{8}) .*$','$1');
  kKeys.sort;

  wurzel:=baum.findeKnoten('00411886');     // Torvalds Schlüssel
  setlength(spitzen,kKeys.count);
  for i:=0 to length(spitzen)-1 do
    spitzen[i]:=baum.findeKnoten(kKeys[i]); // lokal bekannte Schlüssel

  writeln(' fertig');
  kKeys.clear;
  writeln;

  for i:=0 to length(spitzen)-1 do begin
    write('0x'+spitzen[i].idStr+': '+inttostr(kKeys.count));
    j:=baum.wasLiegtZwischen(wurzel,spitzen[i],0,kKeys);
    writeln(' -> '+inttostr(kKeys.count)+' ('+inttostr(j)+')');
    kKeys.sort;
    kKeys.uniq('-');
  end;

  writeln(kKeys.count);
  j:=-1;
  assignfile(f,'');
  for i:=0 to kKeys.count-1 do begin
    s:=kKeys[i];
    k:=strtoint(erstesArgument(s,':'));
    if j<>k then begin
      if j<>-1 then closefile(f);
      j:=k;
      assignfile(f,extractfilepath(paramstr(0))+'out.'+inttostr(j));
      rewrite(f);
    end;
    writeln(f,s);
  end;
  if j<>-1 then closefile(f);

  lKeys.free;
  kKeys.free;
end.