, x509
    , x509-store

import qualified Network.Bippy.Types           as B

import           Data.X509
import           Data.X509.File (readSignedObject, readKeyFile)
import qualified Network.Bippy.Types           as BT

import qualified Aftok.Payments as AP

  , btcConfig     :: BtcConfig

  , billingConfig :: BillingConfig

data BtcConfig = BtcConfig 
  { btcNetwork :: B.Network }

data BillingConfig = BillingConfig
  { network :: BT.Network
  , signingKeyFile :: System.IO.FilePath
  , certsFile :: System.IO.FilePath
  }

          <*> readBtcConfig cfg

          <*> readBillingConfig cfg

readBtcConfig :: CT.Config -> IO BtcConfig
readBtcConfig cfg = 
  let parseNetwork :: String -> B.Network
      parseNetwork "main" = B.MainNet
      parseNetwork _ = B.TestNet
  in  (BtcConfig . parseNetwork) <$> C.require cfg "network"

readBillingConfig :: CT.Config -> IO BillingConfig
readBillingConfig cfg = 
  BillingConfig <$> (parseNetwork <$> C.require cfg "network")
                <*> C.require cfg "signingKeyFile"
                <*> C.require cfg "certsFile"
  where parseNetwork :: String -> BT.Network
        parseNetwork "main" = BT.MainNet
        parseNetwork _ = BT.TestNet
                    

toBillingConfig :: BillingConfig -> IO AP.BillingConfig
toBillingConfig c = do
  privKeys   <- readKeyFile (signingKeyFile c)
  pkiEntries <- readSignedObject (certsFile c)
  privKey <- case headMay privKeys of
    Just (PrivKeyRSA k) -> pure k
    Just (PrivKeyDSA _) -> fail "DSA keys not supported for payment request signing."
    Nothing             -> fail $ "No keys found in private key file " <> signingKeyFile c
  let pkiData = BT.X509SHA256 . CertificateChain $ pkiEntries
  pure $ AP.BillingConfig (network c) privKey pkiData

  widx <- snapEval $ fc (ReadWorkIndex pid)

  createPaymentRequests ptime memogen urigen plgen uid pid

  undefined