resource_ibm_ssl_certificate.go

// Copyright IBM Corp. 2017, 2021 All Rights Reserved.
// Licensed under the Mozilla Public License v2.0

package classicinfrastructure

import (
	fmt "fmt"
	"log"
	"strconv"
	"strings"
	"time"

	"github.com/IBM-Cloud/terraform-provider-ibm/ibm/conns"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
	"github.com/softlayer/softlayer-go/datatypes"
	"github.com/softlayer/softlayer-go/filter"
	"github.com/softlayer/softlayer-go/helpers/product"
	services "github.com/softlayer/softlayer-go/services"
	session1 "github.com/softlayer/softlayer-go/session"
	"github.com/softlayer/softlayer-go/sl"
)

const (
	AdditionalSSLServicesPackageType            = "ADDITIONAL_SERVICES"
	AdditionalServicesSSLCertificatePackageType = "ADDITIONAL_SERVICES_SSL_CERTIFICATE"

	SSLMask = "id"
)

func ResourceIBMSSLCertificate() *schema.Resource {
	return &schema.Resource{
		Create:   resourceIBMSSLCertificateCreate,
		Read:     resourceIBMSSLCertificateRead,
		Update:   resourceIBMSSLCertificateUpdate,
		Delete:   resourceIBMSSLCertificateDelete,
		Importer: &schema.ResourceImporter{},

		Schema: map[string]*schema.Schema{

			"server_count": {
				Type:        schema.TypeInt,
				Required:    true,
				Description: "Server count",
			},

			"server_type": {
				Type:        schema.TypeString,
				Required:    true,
				Description: "server type",
			},

			"validity_months": {
				Type:        schema.TypeInt,
				Required:    true,
				Description: "vslidity of the ssl certificate in month",
			},

			"ssl_type": {
				Type:        schema.TypeString,
				Required:    true,
				Description: "ssl type",
			},

			"certificate_signing_request": {
				Type:        schema.TypeString,
				Required:    true,
				Description: "certificate signing request info",
			},

			"renewal_flag": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     true,
				Description: "Renewal flag",
			},

			"order_approver_email_address": {
				Type:        schema.TypeString,
				Required:    true,
				Description: "Email address of the approver",
			},

			"technical_contact_same_as_org_address_flag": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     false,
				Description: "Technical contact same as org address flag",
			},

			"administrative_contact_same_as_technical_flag": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     false,
				Description: "Administrative contact same as technical flag",
			},

			"billing_contact_same_as_technical_flag": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     false,
				Description: "billing contact",
			},

			"administrative_address_same_as_organization_flag": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     false,
				Description: "administrative address same as organization flag",
			},

			"billing_address_same_as_organization_flag": {
				Type:        schema.TypeBool,
				Optional:    true,
				Default:     false,
				Description: "billing address same as organization flag",
			},

			"organization_information": {
				Type:        schema.TypeSet,
				Required:    true,
				MaxItems:    1,
				Description: "Organization information",
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{

						"org_address": {
							Type:        schema.TypeSet,
							Required:    true,
							Description: "Organization address",
							Elem: &schema.Resource{
								Schema: map[string]*schema.Schema{

									"org_address_line1": {
										Type:     schema.TypeString,
										Required: true,
									},

									"org_address_line2": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"org_city": {
										Type:     schema.TypeString,
										Required: true,
									},

									"org_country_code": {
										Type:     schema.TypeString,
										Required: true,
									},

									"org_postal_code": {
										Type:     schema.TypeString,
										Required: true,
									},

									"org_state": {
										Type:     schema.TypeString,
										Required: true,
									},
								},
							},
						},
						"org_organization_name": {
							Type:        schema.TypeString,
							Required:    true,
							Description: "Organization name",
						},

						"org_phone_number": {
							Type:        schema.TypeString,
							Required:    true,
							Description: "Organization phone number",
						},

						"org_fax_number": {
							Type:     schema.TypeString,
							Optional: true,
						},
					},
				},
			},

			"technical_contact": {
				Type:        schema.TypeSet,
				Required:    true,
				MaxItems:    1,
				Description: "Technical contact info",
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{

						"tech_address": {
							Type:     schema.TypeSet,
							Optional: true,
							Elem: &schema.Resource{
								Schema: map[string]*schema.Schema{
									"tech_address_line1": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"tech_address_line2": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"tech_city": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"tech_country_code": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"tech_postal_code": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"tech_state": {
										Type:     schema.TypeString,
										Optional: true,
									},
								},
							},
						},
						"tech_organization_name": {
							Type:     schema.TypeString,
							Required: true,
						},
						"tech_first_name": {
							Type:     schema.TypeString,
							Required: true,
						},

						"tech_last_name": {
							Type:     schema.TypeString,
							Required: true,
						},

						"tech_email_address": {
							Type:     schema.TypeString,
							Required: true,
						},

						"tech_phone_number": {
							Type:     schema.TypeString,
							Required: true,
						},

						"tech_fax_number": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"tech_title": {
							Type:     schema.TypeString,
							Required: true,
						},
					},
				},
			},
			"billing_contact": {
				Type:     schema.TypeSet,
				Optional: true,
				MaxItems: 1,
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{

						"billing_address": {
							Type:     schema.TypeSet,
							Optional: true,
							Elem: &schema.Resource{
								Schema: map[string]*schema.Schema{
									"billing_address_line1": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"billing_address_line2": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"billing_city": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"billing_country_code": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"billing_postal_code": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"billing_state": {
										Type:     schema.TypeString,
										Optional: true,
									},
								},
							},
						},
						"billing_organization_name": {
							Type:     schema.TypeString,
							Optional: true,
						},
						"billing_first_name": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"billing_last_name": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"billing_email_address": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"billing_phone_number": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"billing_fax_number": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"billing_title": {
							Type:     schema.TypeString,
							Optional: true,
						},
					},
				},
			},

			"administrative_contact": {
				Type:     schema.TypeSet,
				Optional: true,
				MaxItems: 1,
				Elem: &schema.Resource{
					Schema: map[string]*schema.Schema{

						"admin_address": {
							Type:     schema.TypeSet,
							Optional: true,
							Elem: &schema.Resource{
								Schema: map[string]*schema.Schema{
									"admin_address_line1": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"admin_address_line2": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"admin_city": {
										Type:     schema.TypeString,
										Optional: true,
										Default:  "",
									},

									"admin_country_code": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"admin_postal_code": {
										Type:     schema.TypeString,
										Optional: true,
									},

									"admin_state": {
										Type:     schema.TypeString,
										Optional: true,
									},
								},
							},
						},
						"admin_organization_name": {
							Type:     schema.TypeString,
							Optional: true,
						},
						"admin_first_name": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"admin_last_name": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"admin_email_address": {
							Type:     schema.TypeString,
							Optional: true,
						},

						"admin_phone_number": {
							Type:     schema.TypeString,
							Optional: true,
						},
						"admin_fax_number": {
							Type:     schema.TypeString,
							Optional: true,
						},
						"admin_title": {
							Type:     schema.TypeString,
							Optional: true,
						},
					},
				},
			},
		},
	}
}
func resourceIBMSSLCertificateCreate(d *schema.ResourceData, m interface{}) error {
	sess := m.(conns.ClientSession).SoftLayerSession()
	service := services.GetSecurityCertificateRequestService(sess.SetRetries(0))
	sslKeyName := sl.String(d.Get("ssl_type").(string))
	pkg, err := product.GetPackageByType(sess, AdditionalServicesSSLCertificatePackageType)
	if err != nil {
		return err
	}
	productItems, err := product.GetPackageProducts(sess, *pkg.Id)
	if err != nil {
		return err
	}
	var itemId *int
	for _, item := range productItems {
		if *item.KeyName == *sslKeyName {
			itemId = item.Id
		}
	}
	validCSR, err := service.ValidateCsr(sl.String(d.Get("certificate_signing_request").(string)), sl.Int(d.Get("validity_months").(int)), itemId, sl.String(d.Get("server_type").(string)))
	if err != nil {
		return fmt.Errorf("[ERROR] Error during validation of CSR: %s", err)
	}
	if validCSR == true {
		productOrderContainer, err := buildSSLProductOrderContainer(d, sess, AdditionalServicesSSLCertificatePackageType)
		if err != nil {
			// Find price items with AdditionalServices
			productOrderContainer, err = buildSSLProductOrderContainer(d, sess, AdditionalSSLServicesPackageType)
			if err != nil {
				return fmt.Errorf("[ERROR] Error creating SSL certificate: %s", err)
			}
		}
		log.Printf("[INFO] Creating SSL Certificate")
		verifiedOrderContainer, err := services.GetProductOrderService(sess).VerifyOrder(productOrderContainer)
		if err != nil {
			return fmt.Errorf("Order verification failed: %s", err)
		}

		servercorecount := verifiedOrderContainer.ServerCoreCount
		log.Println(verifiedOrderContainer)
		log.Printf("ServerCoreCount: %d", servercorecount)
		receipt, err := services.GetProductOrderService(sess).PlaceOrder(productOrderContainer, sl.Bool(false))

		if err != nil {
			return fmt.Errorf("[ERROR] Error during creation of ssl: %s", err)
		}

		ssl, err := findSSLByOrderId(sess, *receipt.OrderId)
		d.SetId(fmt.Sprintf("%d", *ssl.Id))
		return resourceIBMSSLCertificateRead(d, m)
	} else {
		log.Println("Provided CSR is not valid.")
		return fmt.Errorf("[ERROR] Error while validating CSR: %s", err)
	}
}

func resourceIBMSSLCertificateRead(d *schema.ResourceData, m interface{}) error {
	sess := m.(conns.ClientSession).SoftLayerSession()
	service := services.GetSecurityCertificateRequestService(sess)
	sslId, err := strconv.Atoi(d.Id())
	if err != nil {
		return fmt.Errorf("[ERROR] Not  a valid SSL ID, must be an integer: %s", err)
	}

	ssl, err := service.Id(sslId).Mask(SSLMask).GetObject()
	if err != nil {
		return fmt.Errorf("[ERROR] Error retrieving SSL: %s", err)
	}
	d.Set("certificate_signing_request", ssl.CertificateSigningRequest)
	return nil
}

func resourceIBMSSLCertificateUpdate(d *schema.ResourceData, m interface{}) error {
	return nil
}

func resourceIBMSSLCertificateDelete(d *schema.ResourceData, m interface{}) error {
	sess := m.(conns.ClientSession).SoftLayerSession()
	service := services.GetSecurityCertificateService(sess)
	service1 := services.GetSecurityCertificateRequestService(sess)
	sslId, err := strconv.Atoi(d.Id())
	if err != nil {
		return fmt.Errorf("[ERROR] Not  a valid SSL ID, must be an integer: %s", err)
	}

	value, err := service1.Id(sslId).GetObject()
	if err != nil {
		return fmt.Errorf("[ERROR] Not  a valid Object ID: %s", err)
	}
	sslReqId := value.StatusId

	if *sslReqId == 49 || *sslReqId == 43 {
		deleteObject, err := service.Id(sslId).DeleteObject()
		if deleteObject == false {
			return fmt.Errorf("[ERROR] Error deleting SSL: %s", err)
		} else {
			d.SetId("")
			return nil
		}
	} else if *sslReqId == 50 {
		cancelObject, err := service1.Id(sslId).CancelSslOrder()
		if cancelObject == false {
			return fmt.Errorf("[ERROR] Error deleting SSL: %s", err)
		} else {
			d.SetId("")
			return nil
		}
	} else {
		d.SetId("")
		return nil
	}
}

func normalizedCert(cert interface{}) string {
	if cert == nil || cert == (*string)(nil) {
		return ""
	}

	switch cert.(type) {
	case string:
		return strings.TrimSpace(cert.(string))
	default:
		return ""
	}
}

func buildSSLProductOrderContainer(d *schema.ResourceData, sess *session1.Session, packageType string) (*datatypes.Container_Product_Order_Security_Certificate, error) {
	certificateSigningRequest := sl.String(d.Get("certificate_signing_request").(string))
	orderApproverEmailAddress := sl.String(d.Get("order_approver_email_address").(string))
	renewalFlag := sl.Bool(d.Get("renewal_flag").(bool))
	serverCount := sl.Int(d.Get("server_count").(int))
	validityMonths := sl.Int(d.Get("validity_months").(int))
	serverType := sl.String(d.Get("server_type").(string))
	sslType := sl.String(d.Get("ssl_type").(string))
	orgnizationInfoList := d.Get("organization_information").(*schema.Set).List()
	var addressline1, addressline2, city, countryCode, state, postalCode, organizationName, phoneNumber, faxNumber string
	for _, orgnizationInfo := range orgnizationInfoList {
		org_info := orgnizationInfo.(map[string]interface{})
		org_addressList := org_info["org_address"].(*schema.Set).List()
		for _, org_address := range org_addressList {
			org_addr := org_address.(map[string]interface{})
			addressline1 = org_addr["org_address_line1"].(string)
			addressline2 = org_addr["org_address_line2"].(string)
			city = org_addr["org_city"].(string)
			countryCode = org_addr["org_country_code"].(string)
			state = org_addr["org_state"].(string)
			postalCode = org_addr["org_postal_code"].(string)
		}
		organizationName = org_info["org_organization_name"].(string)
		phoneNumber = org_info["org_phone_number"].(string)
		faxNumber = org_info["org_fax_number"].(string)
	}
	org_address_information := datatypes.Container_Product_Order_Attribute_Address{
		AddressLine1: &addressline1,
		AddressLine2: &addressline2,
		City:         &city,
		CountryCode:  &countryCode,
		PostalCode:   &postalCode,
		State:        &state,
	}
	org_information := datatypes.Container_Product_Order_Attribute_Organization{
		Address:          &org_address_information,
		OrganizationName: &organizationName,
		PhoneNumber:      &phoneNumber,
		FaxNumber:        &faxNumber,
	}
	TechInfoList := d.Get("technical_contact").(*schema.Set).List()
	var tech_addressline1, tech_addressline2, tech_city, tech_countryCode, tech_state, tech_postalCode, tech_organizationName, tech_phoneNumber, tech_faxNumber, tech_emailAddress, tech_firstName, tech_lastName, tech_title string
	for _, technicalcont := range TechInfoList {
		tech_contact := technicalcont.(map[string]interface{})
		tect_addressList := tech_contact["tech_address"].(*schema.Set).List()
		for _, tech_address := range tect_addressList {
			tech_addr := tech_address.(map[string]interface{})
			tech_addressline1 = tech_addr["tech_address_line1"].(string)
			tech_addressline2 = tech_addr["tech_address_line2"].(string)
			tech_city = tech_addr["tech_city"].(string)
			tech_countryCode = tech_addr["tech_country_code"].(string)
			tech_state = tech_addr["tech_state"].(string)
			tech_postalCode = tech_addr["tech_postal_code"].(string)
		}
		tech_organizationName = tech_contact["tech_organization_name"].(string)
		tech_phoneNumber = tech_contact["tech_phone_number"].(string)
		tech_faxNumber = tech_contact["tech_fax_number"].(string)
		tech_emailAddress = tech_contact["tech_email_address"].(string)
		tech_firstName = tech_contact["tech_first_name"].(string)
		tech_lastName = tech_contact["tech_last_name"].(string)
		tech_title = tech_contact["tech_title"].(string)
	}
	tech_address_information := datatypes.Container_Product_Order_Attribute_Address{
		AddressLine1: &tech_addressline1,
		AddressLine2: &tech_addressline2,
		City:         &tech_city,
		CountryCode:  &tech_countryCode,
		PostalCode:   &tech_postalCode,
		State:        &tech_state,
	}
	techAddressFlag := d.Get("technical_contact_same_as_org_address_flag").(bool)
	var technical_contact_attr datatypes.Container_Product_Order_Attribute_Contact
	if techAddressFlag {
		technical_contact_attr = datatypes.Container_Product_Order_Attribute_Contact{
			Address:          &org_address_information,
			EmailAddress:     &tech_emailAddress,
			FirstName:        &tech_firstName,
			LastName:         &tech_lastName,
			OrganizationName: &tech_organizationName,
			PhoneNumber:      &tech_phoneNumber,
			FaxNumber:        &tech_faxNumber,
			Title:            &tech_title,
		}
	} else {
		technical_contact_attr = datatypes.Container_Product_Order_Attribute_Contact{
			Address:          &tech_address_information,
			EmailAddress:     &tech_emailAddress,
			FirstName:        &tech_firstName,
			LastName:         &tech_lastName,
			OrganizationName: &tech_organizationName,
			PhoneNumber:      &tech_phoneNumber,
			FaxNumber:        &tech_faxNumber,
			Title:            &tech_title,
		}
	}

	administrativeContactList := d.Get("administrative_contact").(*schema.Set).List()
	var admin_addressline1, admin_addressline2, admin_city, admin_countryCode, admin_state, admin_postalCode, admin_organizationName, admin_phoneNumber, admin_faxNumber, admin_emailAddress, admin_firstName, admin_lastName, admin_title string
	for _, administrativecont := range administrativeContactList {
		administrative_contact := administrativecont.(map[string]interface{})
		administrative_addressList := administrative_contact["admin_address"].(*schema.Set).List()
		for _, admin_address := range administrative_addressList {
			admin_addr := admin_address.(map[string]interface{})
			admin_addressline1 = admin_addr["admin_address_line1"].(string)
			admin_addressline2 = admin_addr["admin_address_line2"].(string)
			admin_city = admin_addr["admin_city"].(string)
			admin_countryCode = admin_addr["admin_country_code"].(string)
			admin_state = admin_addr["admin_state"].(string)
			admin_postalCode = admin_addr["admin_postal_code"].(string)
		}
		admin_organizationName = administrative_contact["admin_organization_name"].(string)
		admin_phoneNumber = administrative_contact["admin_phone_number"].(string)
		admin_faxNumber = administrative_contact["admin_fax_number"].(string)
		admin_emailAddress = administrative_contact["admin_email_address"].(string)
		admin_firstName = administrative_contact["admin_first_name"].(string)
		admin_lastName = administrative_contact["admin_last_name"].(string)
		admin_title = administrative_contact["admin_title"].(string)
	}
	administrative_address_information := datatypes.Container_Product_Order_Attribute_Address{
		AddressLine1: &admin_addressline1,
		AddressLine2: &admin_addressline2,
		City:         &admin_city,
		CountryCode:  &admin_countryCode,
		PostalCode:   &admin_postalCode,
		State:        &admin_state,
	}
	administrativeAddressSameAsOrg := d.Get("administrative_address_same_as_organization_flag").(bool)
	var administrative_contact_attr datatypes.Container_Product_Order_Attribute_Contact
	if administrativeAddressSameAsOrg {
		administrative_contact_attr = datatypes.Container_Product_Order_Attribute_Contact{
			Address:          &org_address_information,
			EmailAddress:     &admin_emailAddress,
			FirstName:        &admin_firstName,
			LastName:         &admin_lastName,
			OrganizationName: &admin_organizationName,
			PhoneNumber:      &admin_phoneNumber,
			FaxNumber:        &admin_faxNumber,
			Title:            &admin_title,
		}
	} else {
		administrative_contact_attr = datatypes.Container_Product_Order_Attribute_Contact{
			Address:          &administrative_address_information,
			EmailAddress:     &admin_emailAddress,
			FirstName:        &admin_firstName,
			LastName:         &admin_lastName,
			OrganizationName: &admin_organizationName,
			PhoneNumber:      &admin_phoneNumber,
			FaxNumber:        &admin_faxNumber,
			Title:            &admin_title,
		}
	}

	billingContactList := d.Get("billing_contact").(*schema.Set).List()
	var bill_addressline1, bill_addressline2, bill_city, bill_countryCode, bill_state, bill_postalCode, bill_organizationName, bill_phoneNumber, bill_faxNumber, bill_emailAddress, bill_firstName, bill_lastName, bill_title string
	for _, billingcont := range billingContactList {
		billing_contact := billingcont.(map[string]interface{})
		billing_addressList := billing_contact["billing_address"].(*schema.Set).List()
		for _, billing_address := range billing_addressList {
			billing_addr := billing_address.(map[string]interface{})
			bill_addressline1 = billing_addr["billing_address_line1"].(string)
			bill_addressline2 = billing_addr["billing_address_line2"].(string)
			bill_city = billing_addr["billing_city"].(string)
			bill_countryCode = billing_addr["billing_country_code"].(string)
			bill_state = billing_addr["billing_state"].(string)
			bill_postalCode = billing_addr["billing_postal_code"].(string)
		}
		bill_organizationName = billing_contact["billing_organization_name"].(string)
		bill_phoneNumber = billing_contact["billing_phone_number"].(string)
		bill_faxNumber = billing_contact["billing_fax_number"].(string)
		bill_emailAddress = billing_contact["billing_email_address"].(string)
		bill_firstName = billing_contact["billing_first_name"].(string)
		bill_lastName = billing_contact["billing_last_name"].(string)
		bill_title = billing_contact["billing_title"].(string)
	}
	billing_address_information := datatypes.Container_Product_Order_Attribute_Address{
		AddressLine1: &bill_addressline1,
		AddressLine2: &bill_addressline2,
		City:         &bill_city,
		CountryCode:  &bill_countryCode,
		PostalCode:   &bill_postalCode,
		State:        &bill_state,
	}
	billAddressSameAsOrg := d.Get("billing_address_same_as_organization_flag").(bool)
	var billing_contact_attr datatypes.Container_Product_Order_Attribute_Contact
	if billAddressSameAsOrg {
		billing_contact_attr = datatypes.Container_Product_Order_Attribute_Contact{
			Address:          &org_address_information,
			EmailAddress:     &bill_emailAddress,
			FirstName:        &bill_firstName,
			LastName:         &bill_lastName,
			OrganizationName: &bill_organizationName,
			PhoneNumber:      &bill_phoneNumber,
			FaxNumber:        &bill_faxNumber,
			Title:            &bill_title,
		}
	} else {
		billing_contact_attr = datatypes.Container_Product_Order_Attribute_Contact{
			Address:          &billing_address_information,
			EmailAddress:     &bill_emailAddress,
			FirstName:        &bill_firstName,
			LastName:         &bill_lastName,
			OrganizationName: &bill_organizationName,
			PhoneNumber:      &bill_phoneNumber,
			FaxNumber:        &bill_faxNumber,
			Title:            &bill_title,
		}
	}

	administrativeContactSameAsTechnical := d.Get("administrative_contact_same_as_technical_flag").(bool)
	billingContactSameAsTechnical := d.Get("billing_contact_same_as_technical_flag").(bool)
	if administrativeContactSameAsTechnical {
		administrative_contact_attr = technical_contact_attr
	}
	if billingContactSameAsTechnical {
		billing_contact_attr = technical_contact_attr
	}
	pkg, err := product.GetPackageByType(sess, packageType)
	if err != nil {
		return &datatypes.Container_Product_Order_Security_Certificate{}, err
	}

	productItems, err := product.GetPackageProducts(sess, *pkg.Id)
	if err != nil {
		return &datatypes.Container_Product_Order_Security_Certificate{}, err
	}
	sslKeyName := sslType

	sslItems := []datatypes.Product_Item{}
	for _, item := range productItems {
		if *item.KeyName == *sslKeyName {
			sslItems = append(sslItems, item)
		}
	}

	if len(sslItems) == 0 {
		return &datatypes.Container_Product_Order_Security_Certificate{},
			fmt.Errorf("[ERROR] No product items matching %p could be found", sslKeyName)
	}
	sslContainer := datatypes.Container_Product_Order_Security_Certificate{
		Container_Product_Order: datatypes.Container_Product_Order{
			PackageId: pkg.Id,
			Prices: []datatypes.Product_Item_Price{
				{
					Id: sslItems[0].Prices[0].Id,
				},
			},
			Quantity: sl.Int(1),
		},
		AdministrativeContact:     &administrative_contact_attr,
		BillingContact:            &billing_contact_attr,
		CertificateSigningRequest: certificateSigningRequest,
		OrderApproverEmailAddress: orderApproverEmailAddress,
		OrganizationInformation:   &org_information,
		RenewalFlag:               renewalFlag,
		ServerCount:               serverCount,
		ServerType:                serverType,
		TechnicalContact:          &technical_contact_attr,
		ValidityMonths:            validityMonths,
	}

	return &sslContainer, nil
}

func findSSLByOrderId(sess *session1.Session, orderId int) (datatypes.Security_Certificate_Request, error) {
	stateConf := &resource.StateChangeConf{
		Pending: []string{"pending"},
		Target:  []string{"complete"},
		Refresh: func() (interface{}, string, error) {
			acc := services.GetAccountService(sess)
			acc_attr, err := acc.GetAttributes()
			acc_id := acc_attr[0].AccountId
			ssls, err := services.GetSecurityCertificateRequestService(sess).Filter(filter.Path("securityCertificateRequest.order.id").Eq(strconv.Itoa(orderId)).Build()).Mask("id").GetSslCertificateRequests(acc_id)
			if err != nil {
				return datatypes.Security_Certificate_Request{}, "", err
			}

			if len(ssls) >= 1 {
				return ssls[0], "complete", nil
			} else {
				return datatypes.Security_Certificate_Request{}, "pending", nil
			}
		},
		Timeout:    10 * time.Minute,
		Delay:      5 * time.Second,
		MinTimeout: 3 * time.Second,
	}
	pendingResult, err := stateConf.WaitForState()

	if err != nil {
		return datatypes.Security_Certificate_Request{}, err
	}

	var result, ok = pendingResult.(datatypes.Security_Certificate_Request)

	if ok {
		return result, nil
	}

	return datatypes.Security_Certificate_Request{},
		fmt.Errorf("[ERROR] Cannot find SSl with order id '%d'", orderId)
}