// See the file "COPYING" in the main distribution directory for copyright.

#pragma once

#include "zeek/zeek-config.h"

#include <mutex>

#ifdef USE_KRB5
#include <krb5.h>
#endif

#include "analyzer/protocol/krb/krb_pac.h"

namespace zeek::analyzer::krb
	{

class KRB_Analyzer final : public analyzer::Analyzer
	{

public:
	explicit KRB_Analyzer(Connection* conn);
	virtual ~KRB_Analyzer();

	virtual void Done();
	virtual void DeliverPacket(int len, const u_char* data, bool orig, uint64_t seq,
	                           const IP_Hdr* ip, int caplen);

	static analyzer::Analyzer* Instantiate(Connection* conn) { return new KRB_Analyzer(conn); }

	StringValPtr GetAuthenticationInfo(const String* principal, const String* ciphertext,
	                                   const zeek_uint_t enctype);

protected:
	binpac::KRB::KRB_Conn* interp;

private:
	static bool krb_available;
#ifdef USE_KRB5
	static std::once_flag krb_initialized;
	static void Initialize_Krb();
	static krb5_context krb_context;
	static krb5_keytab krb_keytab;
#endif
	};

	} // namespace zeek::analyzer::krb