split wizard into separate files

so we don't go nuts yet.

16 files changed, 1452 insertions, 1302 deletions

diff --git a/src/leap/baseapp/mainwindow.py b/src/leap/baseapp/mainwindow.py
index 8e12b5f6..8188f819 100644
--- a/src/leap/baseapp/mainwindow.py
+++ b/src/leap/baseapp/mainwindow.py
@@ -68,7 +68,7 @@ class LeapWindow(QtGui.QMainWindow,
         # XXX check for wizard
         self.wizard_done = settings.value("FirstRunWizardDone")
 
-        self.initchecks = InitChecksThread(self.run_eip_checks)
+        self.initchecks = FunThread(self.run_eip_checks)
 
         # bind signals
         self.initchecks.finished.connect(
@@ -148,6 +148,8 @@ class LeapWindow(QtGui.QMainWindow,
 
 
 class FunThread(QtCore.QThread):
+    # XXX move to gui/threads
+    # for code consistence
 
     def __init__(self, fun, parent=None):
         QtCore.QThread.__init__(self, parent)
diff --git a/src/leap/gui/__init__.py b/src/leap/gui/__init__.py
index e69de29b..6ecd665f 100644
--- a/src/leap/gui/__init__.py
+++ b/src/leap/gui/__init__.py
@@ -0,0 +1,3 @@
+import firstrun
+
+__all__ = ['firstrun']
diff --git a/src/leap/gui/constants.py b/src/leap/gui/constants.py
new file mode 100644
index 00000000..c874cbc9
--- /dev/null
+++ b/src/leap/gui/constants.py
@@ -0,0 +1,8 @@
+APP_LOGO = ':/images/leap-color-small.png'
+
+# bare is the username portion of a JID
+# full includes the "at" and some extra chars
+# that can be allowed for fqdn
+
+BARE_USERNAME_REGEX = r"^[A-Za-z\d_]+$"
+FULL_USERNAME_REGEX = r"^[A-Za-z\d_@.-]+$"
diff --git a/src/leap/gui/firstrun/__init__.py b/src/leap/gui/firstrun/__init__.py
new file mode 100644
index 00000000..bf8d0df9
--- /dev/null
+++ b/src/leap/gui/firstrun/__init__.py
@@ -0,0 +1,24 @@
+import sip
+sip.setapi('QString', 2)
+sip.setapi('QVariant', 2)
+
+import connect
+import intro
+import last
+import login
+import mixins
+import providerinfo
+import providersetup
+import register
+import selectprovider
+
+__all__ = [
+    'connect',
+    'intro',
+    'last',
+    'login',
+    'mixins',
+    'providerinfo',
+    'providersetup',
+    'register',
+    'selectprovider']
diff --git a/src/leap/gui/firstrun/connect.py b/src/leap/gui/firstrun/connect.py
new file mode 100644
index 00000000..3172a526
--- /dev/null
+++ b/src/leap/gui/firstrun/connect.py
@@ -0,0 +1,218 @@
+"""
+Connecting Page, used in First Run Wizard
+"""
+import logging
+
+from PyQt4 import QtGui
+
+logger = logging.getLogger(__name__)
+
+from leap.base import auth
+
+from leap.gui.constants import APP_LOGO
+from leap.gui.styles import ErrorLabelStyleSheet
+
+
+class ConnectingPage(QtGui.QWizardPage):
+
+    # XXX change to a ValidationPage
+
+    def __init__(self, parent=None):
+        super(ConnectingPage, self).__init__(parent)
+
+        self.setTitle("Connecting")
+        self.setSubTitle('Connecting to provider.')
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        self.status = QtGui.QLabel("")
+        self.status.setWordWrap(True)
+        self.progress = QtGui.QProgressBar()
+        self.progress.setMaximum(100)
+        self.progress.hide()
+
+        # for pre-checks
+        self.status_line_1 = QtGui.QLabel()
+        self.status_line_2 = QtGui.QLabel()
+        self.status_line_3 = QtGui.QLabel()
+        self.status_line_4 = QtGui.QLabel()
+
+        # for connecting signals...
+        self.status_line_5 = QtGui.QLabel()
+
+        layout = QtGui.QGridLayout()
+        layout.addWidget(self.status, 0, 1)
+        layout.addWidget(self.progress, 5, 1)
+        layout.addWidget(self.status_line_1, 8, 1)
+        layout.addWidget(self.status_line_2, 9, 1)
+        layout.addWidget(self.status_line_3, 10, 1)
+        layout.addWidget(self.status_line_4, 11, 1)
+
+        # XXX to be used?
+        #self.validation_status = QtGui.QLabel("")
+        #self.validation_status.setStyleSheet(
+            #ErrorLabelStyleSheet)
+        #self.validation_msg = QtGui.QLabel("")
+
+        self.setLayout(layout)
+
+        self.goto_login_again = False
+
+    def set_status(self, status):
+        self.status.setText(status)
+        self.status.setWordWrap(True)
+
+    def set_status_line(self, line, status):
+        line = getattr(self, 'status_line_%s' % line)
+        if line:
+            line.setText(status)
+
+    def set_validation_status(self, status):
+        # Do not remember if we're using
+        # status lines > 3 now...
+        # if we are, move below
+        self.status_line_3.setStyleSheet(
+            ErrorLabelStyleSheet)
+        self.status_line_3.setText(status)
+
+    def set_validation_message(self, message):
+        self.status_line_4.setText(message)
+        self.status_line_4.setWordWrap(True)
+
+    def get_donemsg(self, msg):
+        return "%s ... done" % msg
+
+    def run_eip_checks_for_provider_and_connect(self, domain):
+        wizard = self.wizard()
+        conductor = wizard.conductor
+        start_eip_signal = getattr(
+            wizard,
+            'start_eipconnection_signal', None)
+
+        conductor.set_provider_domain(domain)
+        conductor.run_checks()
+        self.conductor = conductor
+        errors = self.eip_error_check()
+        if not errors and start_eip_signal:
+            start_eip_signal.emit()
+
+    def eip_error_check(self):
+        """
+        a version of the main app error checker,
+        but integrated within the connecting page of the wizard.
+        consumes the conductor error queue.
+        pops errors, and add those to the wizard page
+        """
+        logger.debug('eip error check from connecting page')
+        errq = self.conductor.error_queue
+        # XXX missing!
+
+    def fetch_and_validate(self):
+        import time
+        domain = self.field('provider_domain')
+        wizard = self.wizard()
+        #pconfig = wizard.providerconfig
+        eipconfigchecker = wizard.eipconfigchecker()
+        pCertChecker = wizard.providercertchecker(
+            domain=domain)
+
+        # username and password are in different fields
+        # if they were stored in log_in or sign_up pages.
+        from_login = self.wizard().from_login
+        unamek_base = 'userName'
+        passwk_base = 'userPassword'
+        unamek = 'login_%s' % unamek_base if from_login else unamek_base
+        passwk = 'login_%s' % passwk_base if from_login else passwk_base
+
+        username = self.field(unamek)
+        password = self.field(passwk)
+        credentials = username, password
+
+        self.progress.show()
+
+        fetching_eip_conf_msg = 'Fetching eip service configuration'
+        self.set_status(fetching_eip_conf_msg)
+        self.progress.setValue(30)
+
+        # Fetching eip service
+        eipconfigchecker.fetch_eip_service_config(
+            domain=domain)
+
+        self.status_line_1.setText(
+            self.get_donemsg(fetching_eip_conf_msg))
+
+        getting_client_cert_msg = 'Getting client certificate'
+        self.set_status(getting_client_cert_msg)
+        self.progress.setValue(66)
+
+        # Download cert
+        try:
+            pCertChecker.download_new_client_cert(
+                credentials=credentials)
+        except auth.SRPAuthenticationError:
+            self.set_validation_status("Authentication error")
+            #self.set_validation_message(
+                #"Click <i>next</i> to introduce your "
+                #"credentials again")
+            self.goto_login_again = True
+            # We should do something here
+            # but it's broken
+            return False
+
+        time.sleep(2)
+        self.status_line_2.setText(
+            self.get_donemsg(getting_client_cert_msg))
+
+        validating_clientcert_msg = 'Validating client certificate'
+        self.set_status(validating_clientcert_msg)
+        self.progress.setValue(90)
+        time.sleep(2)
+        self.status_line_3.setText(
+            self.get_donemsg(validating_clientcert_msg))
+
+        self.progress.setValue(100)
+        time.sleep(3)
+
+        # here we go! :)
+        self.run_eip_checks_for_provider_and_connect(domain)
+
+        #self.validation_block = self.wait_for_validation_block()
+
+        # XXX signal timeout!
+        return True
+
+    #
+    # wizardpage methods
+    #
+
+    def nextId(self):
+        wizard = self.wizard()
+        # XXX this does not work because
+        # page login has already been met
+        #if self.goto_login_again:
+            #next_ = "login"
+        #else:
+            #next_ = "lastpage"
+        next_ = "lastpage"
+        return wizard.get_page_index(next_)
+
+    def initializePage(self):
+        # XXX if we're coming from signup page
+        # we could say something like
+        # 'registration successful!'
+        self.status.setText(
+            "We have "
+            "all we need to connect with the provider.<br><br> "
+            "Click <i>next</i> to continue. ")
+        self.progress.setValue(0)
+        self.progress.hide()
+        self.status_line_1.setText('')
+        self.status_line_2.setText('')
+        self.status_line_3.setText('')
+
+    def validatePage(self):
+        # XXX remove
+        validated = self.fetch_and_validate()
+        return validated
diff --git a/src/leap/gui/firstrun/intro.py b/src/leap/gui/firstrun/intro.py
new file mode 100644
index 00000000..4bb008c7
--- /dev/null
+++ b/src/leap/gui/firstrun/intro.py
@@ -0,0 +1,68 @@
+"""
+Intro page used in first run wizard
+"""
+
+from PyQt4 import QtGui
+
+from leap.gui.constants import APP_LOGO
+
+
+class IntroPage(QtGui.QWizardPage):
+    def __init__(self, parent=None):
+        super(IntroPage, self).__init__(parent)
+
+        self.setTitle("First run wizard.")
+
+        #self.setPixmap(
+            #QtGui.QWizard.WatermarkPixmap,
+            #QtGui.QPixmap(':/images/watermark1.png'))
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        label = QtGui.QLabel(
+            "Now we will guide you through "
+            "some configuration that is needed before you "
+            "can connect for the first time.<br><br>"
+            "If you ever need to modify these options again, "
+            "you can find the wizard in the '<i>Settings</i>' menu from the "
+            "main window.<br><br>"
+            "Do you want to <b>sign up</b> for a new account, or <b>log "
+            "in</b> with an already existing username?<br>")
+        label.setWordWrap(True)
+
+        radiobuttonGroup = QtGui.QGroupBox()
+
+        self.sign_up = QtGui.QRadioButton(
+            "Sign up for a new account.")
+        self.sign_up.setChecked(True)
+        self.log_in = QtGui.QRadioButton(
+            "Log In with my credentials.")
+
+        radiobLayout = QtGui.QVBoxLayout()
+        radiobLayout.addWidget(self.sign_up)
+        radiobLayout.addWidget(self.log_in)
+        radiobuttonGroup.setLayout(radiobLayout)
+
+        layout = QtGui.QVBoxLayout()
+        layout.addWidget(label)
+        layout.addWidget(radiobuttonGroup)
+        self.setLayout(layout)
+
+        self.registerField('is_signup', self.sign_up)
+
+    def validatePage(self):
+        return True
+
+    def nextId(self):
+        """
+        returns next id
+        in a non-linear wizard
+        """
+        if self.sign_up.isChecked():
+            next_ = 'providerselection'
+        if self.log_in.isChecked():
+            next_ = 'login'
+        wizard = self.wizard()
+        return wizard.get_page_index(next_)
diff --git a/src/leap/gui/firstrun/last.py b/src/leap/gui/firstrun/last.py
new file mode 100644
index 00000000..6f9abbb5
--- /dev/null
+++ b/src/leap/gui/firstrun/last.py
@@ -0,0 +1,89 @@
+"""
+Last Page, used in First Run Wizard
+"""
+import logging
+
+from PyQt4 import QtGui
+
+from leap.util.coroutines import coroutine
+from leap.gui.constants import APP_LOGO
+
+logger = logging.getLogger(__name__)
+
+
+class LastPage(QtGui.QWizardPage):
+    def __init__(self, parent=None):
+        super(LastPage, self).__init__(parent)
+
+        self.setTitle("Connecting to Encrypted Internet Proxy service...")
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        #self.setPixmap(
+            #QtGui.QWizard.WatermarkPixmap,
+            #QtGui.QPixmap(':/images/watermark2.png'))
+
+        self.label = QtGui.QLabel()
+        self.label.setWordWrap(True)
+
+        self.status_line_1 = QtGui.QLabel()
+        self.status_line_2 = QtGui.QLabel()
+        self.status_line_3 = QtGui.QLabel()
+        self.status_line_4 = QtGui.QLabel()
+
+        layout = QtGui.QVBoxLayout()
+        layout.addWidget(self.label)
+
+        # make loop
+        layout.addWidget(self.status_line_1)
+        layout.addWidget(self.status_line_2)
+        layout.addWidget(self.status_line_3)
+        layout.addWidget(self.status_line_4)
+
+        self.setLayout(layout)
+
+    def set_status_line(self, line, status):
+        statusline = getattr(self, 'status_line_%s' % line)
+        if statusline:
+            statusline.setText(status)
+
+    def set_finished_status(self):
+        self.setTitle('You are now using an encrypted connection!')
+        finishText = self.wizard().buttonText(
+            QtGui.QWizard.FinishButton)
+        finishText = finishText.replace('&', '')
+        self.label.setText(
+            "Click '<i>%s</i>' to end the wizard and "
+            "save your settings." % finishText)
+
+    @coroutine
+    def eip_status_handler(self):
+        # XXX this can be changed to use
+        # signals. See progress.py
+        logger.debug('logging status in last page')
+        self.validation_done = False
+        status_count = 0
+        try:
+            while True:
+                status = (yield)
+                status_count += 1
+                # XXX add to line...
+                logger.debug('status --> %s', status)
+                self.set_status_line(status_count, status)
+                if status == "connected":
+                    self.set_finished_status()
+                    break
+        except GeneratorExit:
+            pass
+
+    def initializePage(self):
+        wizard = self.wizard()
+        if not wizard:
+            return
+        eip_status_handler = self.eip_status_handler()
+        eip_statuschange_signal = wizard.eip_statuschange_signal
+        if eip_statuschange_signal:
+            eip_statuschange_signal.connect(
+                lambda status: eip_status_handler.send(status))
diff --git a/src/leap/gui/firstrun/login.py b/src/leap/gui/firstrun/login.py
new file mode 100644
index 00000000..ae4b23c6
--- /dev/null
+++ b/src/leap/gui/firstrun/login.py
@@ -0,0 +1,132 @@
+"""
+LogIn Page, used inf First Run Wizard
+"""
+from PyQt4 import QtCore
+from PyQt4 import QtGui
+
+import requests
+
+from leap.gui.firstrun.mixins import UserFormMixIn
+
+from leap.gui.constants import APP_LOGO, FULL_USERNAME_REGEX
+from leap.gui.styles import ErrorLabelStyleSheet
+
+
+class LogInPage(QtGui.QWizardPage, UserFormMixIn):
+    def __init__(self, parent=None):
+        super(LogInPage, self).__init__(parent)
+
+        self.setTitle("Log In")
+        self.setSubTitle("Log in with your credentials.")
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        userNameLabel = QtGui.QLabel("User &name:")
+        userNameLineEdit = QtGui.QLineEdit()
+        userNameLineEdit.cursorPositionChanged.connect(
+            self.reset_validation_status)
+        userNameLabel.setBuddy(userNameLineEdit)
+
+        # let's add regex validator
+        usernameRe = QtCore.QRegExp(FULL_USERNAME_REGEX)
+        userNameLineEdit.setValidator(
+            QtGui.QRegExpValidator(usernameRe, self))
+        self.userNameLineEdit = userNameLineEdit
+
+        userPasswordLabel = QtGui.QLabel("&Password:")
+        self.userPasswordLineEdit = QtGui.QLineEdit()
+        self.userPasswordLineEdit.setEchoMode(
+            QtGui.QLineEdit.Password)
+        userPasswordLabel.setBuddy(self.userPasswordLineEdit)
+
+        self.registerField('login_userName*', self.userNameLineEdit)
+        self.registerField('login_userPassword*', self.userPasswordLineEdit)
+
+        layout = QtGui.QGridLayout()
+        layout.setColumnMinimumWidth(0, 20)
+
+        validationMsg = QtGui.QLabel("")
+        validationMsg.setStyleSheet(ErrorLabelStyleSheet)
+        self.validationMsg = validationMsg
+
+        layout.addWidget(validationMsg, 0, 3)
+        layout.addWidget(userNameLabel, 1, 0)
+        layout.addWidget(self.userNameLineEdit, 1, 3)
+        layout.addWidget(userPasswordLabel, 2, 0)
+        layout.addWidget(self.userPasswordLineEdit, 2, 3)
+
+        self.setLayout(layout)
+
+        #self.registerField('is_login_wizard')
+
+    def onUserNameEdit(self, *args):
+        if self.initial_username_sample:
+            self.userNameLineEdit.setText('')
+            self.initial_username_sample = None
+
+    # pagewizard methods
+
+    def nextId(self):
+        wizard = self.wizard()
+        if not wizard:
+            return
+        if wizard.is_provider_setup is True:
+            next_ = 'connecting'
+        if wizard.is_provider_setup is False:
+            next_ = 'providersetup'
+        return wizard.get_page_index(next_)
+
+    def initializePage(self):
+        self.userNameLineEdit.setText('username@provider.example.org')
+        self.userNameLineEdit.cursorPositionChanged.connect(
+            self.onUserNameEdit)
+        self.initial_username_sample = True
+
+    def validatePage(self):
+        wizard = self.wizard()
+        eipconfigchecker = wizard.eipconfigchecker()
+
+        full_username = self.userNameLineEdit.text()
+        password = self.userPasswordLineEdit.text()
+        if full_username.count('@') != 1:
+            self.set_validation_status(
+                "Username must be in the username@provider form.")
+            return False
+
+        username, domain = full_username.split('@')
+        self.setField('provider_domain', domain)
+        self.setField('login_userName', username)
+        self.setField('login_userPassword', password)
+
+        # Able to contact domain?
+        # can get definition?
+        # two-by-one
+        try:
+            eipconfigchecker.fetch_definition(domain=domain)
+
+        # we're using requests here for all
+        # the possible error cases that it catches.
+        except requests.exceptions.ConnectionError as exc:
+            self.set_validation_status(exc.message[1])
+            return False
+        except requests.exceptions.HTTPError as exc:
+            self.set_validation_status(exc.message)
+            return False
+        wizard.set_providerconfig(
+            eipconfigchecker.defaultprovider.config)
+
+        # XXX validate user? or we leave that for later?
+        # I think the best thing to do for that is
+        # continue to provider setup page, and if
+        # we catch authentication error there, redirect
+        # again to this page (by clicking "next" to
+        # come here).
+        # Rationale is that we need to verify server certs
+        # and so on.
+
+        # mark that we came from login page.
+        self.wizard().from_login = True
+
+        return True
diff --git a/src/leap/gui/firstrun/mixins.py b/src/leap/gui/firstrun/mixins.py
new file mode 100644
index 00000000..c4731893
--- /dev/null
+++ b/src/leap/gui/firstrun/mixins.py
@@ -0,0 +1,18 @@
+"""
+mixins used in First Run Wizard
+"""
+
+
+class UserFormMixIn(object):
+
+    def reset_validation_status(self):
+        """
+        empty the validation msg
+        """
+        self.validationMsg.setText('')
+
+    def set_validation_status(self, msg):
+        """
+        set generic validation status
+        """
+        self.validationMsg.setText(msg)
diff --git a/src/leap/gui/firstrun/providerinfo.py b/src/leap/gui/firstrun/providerinfo.py
new file mode 100644
index 00000000..f5f5518a
--- /dev/null
+++ b/src/leap/gui/firstrun/providerinfo.py
@@ -0,0 +1,67 @@
+"""
+Provider Info Page, used in First run Wizard
+"""
+
+from PyQt4 import QtGui
+
+from leap.gui.constants import APP_LOGO
+
+
+class ProviderInfoPage(QtGui.QWizardPage):
+    def __init__(self, parent=None):
+        super(ProviderInfoPage, self).__init__(parent)
+
+        self.setTitle("Provider Info")
+        self.setSubTitle("Available information about chosen provider.")
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        displayName = QtGui.QLabel("")
+        description = QtGui.QLabel("")
+        enrollment_policy = QtGui.QLabel("")
+        # XXX set stylesheet...
+        # prettify a little bit.
+        # bigger fonts and so on...
+        self.displayName = displayName
+        self.description = description
+        self.enrollment_policy = enrollment_policy
+
+        layout = QtGui.QGridLayout()
+        layout.addWidget(displayName, 0, 1)
+        layout.addWidget(description, 1, 1)
+        layout.addWidget(enrollment_policy, 2, 1)
+
+        self.setLayout(layout)
+
+    def initializePage(self):
+        # XXX move to show info...
+
+        # XXX get multilingual objects
+        # directly from the config object
+
+        lang = "en"
+        pconfig = self.wizard().providerconfig
+
+        dn = pconfig.get('display_name')
+        display_name = dn[lang] if dn else ''
+        self.displayName.setText(
+            "<b>%s</b>" % display_name)
+
+        desc = pconfig.get('description')
+        description_text = desc[lang] if desc else ''
+        self.description.setText(
+            "<i>%s</i>" % description_text)
+
+        enroll = pconfig.get('enrollment_policy')
+        if enroll:
+            self.enrollment_policy.setText(
+                'enrollment policy: %s' % enroll)
+
+    def nextId(self):
+        wizard = self.wizard()
+        next_ = "providersetupvalidation"
+        return wizard.get_page_index(next_)
+
+
diff --git a/src/leap/gui/firstrun/providersetup.py b/src/leap/gui/firstrun/providersetup.py
new file mode 100644
index 00000000..63f55d00
--- /dev/null
+++ b/src/leap/gui/firstrun/providersetup.py
@@ -0,0 +1,122 @@
+"""
+Provider Setup Validation Page,
+used if First Run Wizard
+"""
+
+from PyQt4 import QtGui
+
+from leap.gui.progress import ValidationPage
+
+from leap.gui.constants import APP_LOGO
+
+
+class ProviderSetupValidationPage(ValidationPage):
+    def __init__(self, parent=None):
+        super(ProviderSetupValidationPage, self).__init__(parent)
+        self.setTitle("Setting up provider")
+        #self.setSubTitle(
+            #"auto configuring provider...")
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+    def _do_checks(self, signal=None):
+        """
+        executes actual checks in a separate thread
+        """
+        import time
+        domain = self.field('provider_domain')
+        wizard = self.wizard()
+        pconfig = wizard.providerconfig
+
+        pCertChecker = wizard.providercertchecker
+        certchecker = pCertChecker(domain=domain)
+
+        signal.emit('Fetching CA certificate')
+        self.progress.setValue(30)
+
+        if pconfig:
+            ca_cert_uri = pconfig.get('ca_cert_uri').geturl()
+        else:
+            ca_cert_uri = None
+
+        # XXX check scheme == "https"
+        # XXX passing verify == False because
+        # we have trusted right before.
+        # We should check it's the same domain!!!
+        # (Check with the trusted fingerprints dict
+        # or something smart)
+
+        #certchecker.download_ca_cert(
+            #uri=ca_cert_uri,
+            #verify=False)
+
+        time.sleep(2)
+
+        signal.emit('Checking CA fingerprint')
+        self.progress.setValue(66)
+        #ca_cert_fingerprint = pconfig.get('ca_cert_fingerprint', None)
+
+        # XXX get fingerprint dict (types)
+        #sha256_fpr = ca_cert_fingerprint.split('=')[1]
+
+        #validate_fpr = certchecker.check_ca_cert_fingerprint(
+            #fingerprint=sha256_fpr)
+        time.sleep(0.5)
+        #if not validate_fpr:
+            # XXX update validationMsg
+            # should catch exception
+            #return False
+
+        signal.emit('Validating api certificate')
+        self.progress.setValue(90)
+
+        #api_uri = pconfig.get('api_uri', None)
+        #try:
+            #api_cert_verified = certchecker.verify_api_https(api_uri)
+        #except requests.exceptions.SSLError as exc:
+            #logger.error('BUG #638. %s' % exc.message)
+            # XXX RAISE! See #638
+            # bypassing until the hostname is fixed.
+            # We probably should raise yet-another-warning
+            # here saying user that the hostname "XX.XX.XX.XX' does not
+            # match 'foo.bar.baz'
+            #api_cert_verified = True
+
+        #if not api_cert_verified:
+            # XXX update validationMsg
+            # should catch exception
+            #return False
+        time.sleep(0.5)
+        #ca_cert_path = checker.ca_cert_path
+
+        self.progress.setValue(100)
+        signal.emit('end_sentinel')
+        time.sleep(1)
+
+    def _do_validation(self):
+        """
+        called after _do_checks has finished
+        (connected to checker thread finished signal)
+        """
+        wizard = self.wizard()
+        if self.errors:
+            print 'going back with errors'
+            wizard.set_validation_error(
+                'signup', 'that name is taken')
+            self.go_back()
+        else:
+            print 'going next'
+            self.go_next()
+
+    def nextId(self):
+        wizard = self.wizard()
+        if not wizard:
+            return
+        is_signup = self.field('is_signup')
+        if is_signup is True:
+            next_ = 'signup'
+        if is_signup is False:
+            next_ = 'connecting'
+        return wizard.get_page_index(next_)
diff --git a/src/leap/gui/firstrun/register.py b/src/leap/gui/firstrun/register.py
new file mode 100644
index 00000000..b04844bf
--- /dev/null
+++ b/src/leap/gui/firstrun/register.py
@@ -0,0 +1,211 @@
+"""
+Register User Page, used in First Run Wizard
+"""
+import json
+import logging
+import socket
+
+import requests
+
+from PyQt4 import QtCore
+from PyQt4 import QtGui
+
+from leap.base import auth
+from leap.gui.firstrun.mixins import UserFormMixIn
+
+logger = logging.getLogger(__name__)
+
+from leap.gui.constants import APP_LOGO, BARE_USERNAME_REGEX
+from leap.gui.styles import ErrorLabelStyleSheet
+
+
+class RegisterUserPage(QtGui.QWizardPage, UserFormMixIn):
+    setSigningUpStatus = QtCore.pyqtSignal([])
+
+    def __init__(self, parent=None):
+        super(RegisterUserPage, self).__init__(parent)
+
+        # bind wizard page signals
+        self.setSigningUpStatus.connect(
+            lambda: self.set_validation_status(
+                'validating'))
+
+        self.setTitle("Sign Up")
+
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        userNameLabel = QtGui.QLabel("User &name:")
+        userNameLineEdit = QtGui.QLineEdit()
+        userNameLineEdit.cursorPositionChanged.connect(
+            self.reset_validation_status)
+        userNameLabel.setBuddy(userNameLineEdit)
+
+        # let's add regex validator
+        usernameRe = QtCore.QRegExp(BARE_USERNAME_REGEX)
+        userNameLineEdit.setValidator(
+            QtGui.QRegExpValidator(usernameRe, self))
+        self.userNameLineEdit = userNameLineEdit
+
+        userPasswordLabel = QtGui.QLabel("&Password:")
+        self.userPasswordLineEdit = QtGui.QLineEdit()
+        self.userPasswordLineEdit.setEchoMode(
+            QtGui.QLineEdit.Password)
+        userPasswordLabel.setBuddy(self.userPasswordLineEdit)
+
+        userPassword2Label = QtGui.QLabel("Password (again):")
+        self.userPassword2LineEdit = QtGui.QLineEdit()
+        self.userPassword2LineEdit.setEchoMode(
+            QtGui.QLineEdit.Password)
+        userPassword2Label.setBuddy(self.userPassword2LineEdit)
+
+        rememberPasswordCheckBox = QtGui.QCheckBox(
+            "&Remember username and password.")
+        rememberPasswordCheckBox.setChecked(True)
+
+        self.registerField('userName*', self.userNameLineEdit)
+        self.registerField('userPassword*', self.userPasswordLineEdit)
+
+        # XXX missing password confirmation
+        # XXX validator!
+
+        self.registerField('rememberPassword', rememberPasswordCheckBox)
+
+        layout = QtGui.QGridLayout()
+        layout.setColumnMinimumWidth(0, 20)
+
+        validationMsg = QtGui.QLabel("")
+        validationMsg.setStyleSheet(ErrorLabelStyleSheet)
+
+        self.validationMsg = validationMsg
+
+        layout.addWidget(validationMsg, 0, 3)
+        layout.addWidget(userNameLabel, 1, 0)
+        layout.addWidget(self.userNameLineEdit, 1, 3)
+        layout.addWidget(userPasswordLabel, 2, 0)
+        layout.addWidget(userPassword2Label, 3, 0)
+        layout.addWidget(self.userPasswordLineEdit, 2, 3)
+        layout.addWidget(self.userPassword2LineEdit, 3, 3)
+        layout.addWidget(rememberPasswordCheckBox, 4, 3, 4, 4)
+        self.setLayout(layout)
+
+    # overwritten methods
+
+    def initializePage(self):
+        """
+        inits wizard page
+        """
+        provider = self.field('provider_domain')
+        self.setSubTitle(
+            "Register a new user with provider %s." %
+            provider)
+        self.validationMsg.setText('')
+
+    def validatePage(self):
+        """
+        validation
+        we initialize the srp protocol register
+        and try to register user. if error
+        returned we write validation error msg
+        above the form.
+        """
+        # the slot for this signal is not doing
+        # what's expected. Investigate why,
+        # right now we're not giving any feedback
+        # to the user re. what's going on. The only
+        # thing I can see as a workaround is setting
+        # a low timeout.
+        wizard = self.wizard()
+
+        self.setSigningUpStatus.emit()
+
+        username = self.userNameLineEdit.text()
+        password = self.userPasswordLineEdit.text()
+        password2 = self.userPassword2LineEdit.text()
+
+        # have some call to a password checker...
+
+        if password != password2:
+            self.set_validation_status('Password does not match.')
+            return False
+
+        if len(password) < 6:
+            self.set_validation_status('Password too short.')
+            return False
+
+        if password == "123456":
+            # joking
+            self.set_validation_status('Password too obvious.')
+            return False
+
+        domain = self.field('provider_domain')
+
+        if wizard and wizard.debug_server:
+            # We're debugging
+            dbgsrv = wizard.debug_server
+            schema = dbgsrv.scheme
+            netloc = dbgsrv.netloc
+            port = None
+            netloc_split = netloc.split(':')
+            if len(netloc_split) > 1:
+                provider, port = netloc_split
+            else:
+                provider = netloc
+
+            signup = auth.LeapSRPRegister(
+                scheme=schema,
+                provider=provider,
+                port=port)
+
+        else:
+            # this is the real thing
+            signup = auth.LeapSRPRegister(
+                # XXX FIXME 0 Force HTTPS
+                #schema="https",
+                schema="http",
+                provider=domain)
+        try:
+            ok, req = signup.register_user(username, password)
+        except socket.timeout:
+            self.set_validation_status(
+                "Error connecting to provider (timeout)")
+            return False
+
+        except requests.exceptions.ConnectionError as exc:
+            logger.error(exc)
+            self.set_validation_status(
+                "Error connecting to provider "
+                "(connection error)")
+            return False
+
+        if ok:
+            return True
+
+        # something went wrong.
+        # not registered, let's catch what.
+        # get timeout
+        # ...
+        if req.status_code == 500:
+            self.set_validation_status(
+                "Error during registration (500)")
+            return False
+
+        validation_msgs = json.loads(req.content)
+        logger.debug('validation errors: %s' % validation_msgs)
+        errors = validation_msgs.get('errors', None)
+        if errors and errors.get('login', None):
+            # XXX this sometimes catch the blank username
+            # but we're not allowing that (soon)
+            self.set_validation_status(
+                'Username not available.')
+        else:
+            self.set_validation_status(
+                "Error during sign up")
+        return False
+
+    def nextId(self):
+        wizard = self.wizard()
+        if not wizard:
+            return
+        return wizard.get_page_index('connecting')
diff --git a/src/leap/gui/firstrun/selectprovider.py b/src/leap/gui/firstrun/selectprovider.py
new file mode 100644
index 00000000..d26fdbbb
--- /dev/null
+++ b/src/leap/gui/firstrun/selectprovider.py
@@ -0,0 +1,216 @@
+"""
+Select Provider Page, used in First Run Wizard
+"""
+from PyQt4 import QtCore
+from PyQt4 import QtGui
+
+from leap.base import exceptions as baseexceptions
+from leap.crypto import certs
+from leap.eip import exceptions as eipexceptions
+
+from leap.gui.constants import APP_LOGO
+from leap.gui.styles import ErrorLabelStyleSheet
+
+
+class SelectProviderPage(QtGui.QWizardPage):
+    def __init__(self, parent=None, providers=None):
+        super(SelectProviderPage, self).__init__(parent)
+
+        self.setTitle("Enter Provider")
+        self.setSubTitle(
+            "Please enter the domain of the provider you want "
+            "to use for your connection."
+        )
+        self.setPixmap(
+            QtGui.QWizard.LogoPixmap,
+            QtGui.QPixmap(APP_LOGO))
+
+        self.did_cert_check = False
+
+        providerNameLabel = QtGui.QLabel("h&ttps://")
+        # note that we expect the bare domain name
+        # we will add the scheme later
+        providerNameEdit = QtGui.QLineEdit()
+        providerNameEdit.cursorPositionChanged.connect(
+            self.reset_validation_status)
+        providerNameLabel.setBuddy(providerNameEdit)
+
+        # add regex validator
+        providerDomainRe = QtCore.QRegExp(r"^[a-z\d_-.]+$")
+        providerNameEdit.setValidator(
+            QtGui.QRegExpValidator(providerDomainRe, self))
+        self.providerNameEdit = providerNameEdit
+
+        # Eventually we will seed a list of
+        # well known providers here.
+
+        #providercombo = QtGui.QComboBox()
+        #if providers:
+            #for provider in providers:
+                #providercombo.addItem(provider)
+        #providerNameSelect = providercombo
+
+        self.registerField('provider_domain*', self.providerNameEdit)
+        #self.registerField('provider_name_index', providerNameSelect)
+
+        validationMsg = QtGui.QLabel("")
+        validationMsg.setStyleSheet(ErrorLabelStyleSheet)
+        self.validationMsg = validationMsg
+
+        # cert info
+
+        # this is used in the callback
+        # for the checkbox changes.
+        # tricky, since the first time came
+        # from the exception message.
+        # should get string from exception too!
+        self.bad_cert_status = "Server certificate could not be verified."
+
+        self.certInfo = QtGui.QLabel("")
+        self.certInfo.setWordWrap(True)
+        self.certWarning = QtGui.QLabel("")
+        self.trustProviderCertCheckBox = QtGui.QCheckBox(
+            "&Trust this provider certificate.")
+
+        self.trustProviderCertCheckBox.stateChanged.connect(
+            self.onTrustCheckChanged)
+
+        layout = QtGui.QGridLayout()
+        layout.addWidget(validationMsg, 0, 2)
+        layout.addWidget(providerNameLabel, 1, 1)
+        layout.addWidget(providerNameEdit, 1, 2)
+
+        # XXX get a groupbox or something....
+        certinfoGroup = QtGui.QGroupBox("Certificate validation")
+        certinfoLayout = QtGui.QVBoxLayout()
+        certinfoLayout.addWidget(self.certInfo)
+        certinfoLayout.addWidget(self.certWarning)
+        certinfoLayout.addWidget(self.trustProviderCertCheckBox)
+        certinfoGroup.setLayout(certinfoLayout)
+
+        layout.addWidget(certinfoGroup, 4, 1, 4, 2)
+        self.certinfoGroup = certinfoGroup
+        self.certinfoGroup.hide()
+
+        self.setLayout(layout)
+
+    def is_insecure_cert_trusted(self):
+        return self.trustProviderCertCheckBox.isChecked()
+
+    def onTrustCheckChanged(self, state):
+        checked = False
+        if state == 2:
+            checked = True
+
+        if checked:
+            self.reset_validation_status()
+        else:
+            self.set_validation_status(self.bad_cert_status)
+
+        # trigger signal to redraw next button
+        self.completeChanged.emit()
+
+    def reset_validation_status(self):
+        """
+        empty the validation msg
+        """
+        self.validationMsg.setText('')
+
+    def set_validation_status(self, status):
+        self.validationMsg.setText(status)
+
+    def add_cert_info(self, certinfo):
+        self.certWarning.setText(
+            "Do you want to <b>trust this provider certificate?</b>")
+        self.certInfo.setText(
+            'SHA-256 fingerprint: <i>%s</i><br>' % certinfo)
+        self.certInfo.setWordWrap(True)
+        self.certinfoGroup.show()
+
+    # pagewizard methods
+
+    def isComplete(self):
+        if not self.did_cert_check:
+            return True
+        if self.is_insecure_cert_trusted():
+            return True
+        return False
+
+    def initializePage(self):
+        self.certinfoGroup.hide()
+
+    def validatePage(self):
+        ##################################
+        # XXX FIXME!
+        ##################################
+        ##################################
+        ##################################
+        ##################################
+        ##### validation skipped !!! #####
+        ##################################
+        ##################################
+        return True
+        ##################################
+        ##################################
+        ##################################
+
+        # XXX move to ProviderInfo...
+
+        wizard = self.wizard()
+        netchecker = wizard.netchecker()
+        providercertchecker = wizard.providercertchecker()
+        eipconfigchecker = wizard.eipconfigchecker()
+
+        domain = self.providerNameEdit.text()
+
+        # try name resolution
+        try:
+            netchecker.check_name_resolution(
+                domain)
+
+        except baseexceptions.LeapException as exc:
+            self.set_validation_status(exc.usermessage)
+            return False
+
+        # try https connection
+        try:
+            providercertchecker.is_https_working(
+                "https://%s" % domain,
+                verify=True)
+
+        except eipexceptions.HttpsBadCertError as exc:
+            if self.trustProviderCertCheckBox.isChecked():
+                pass
+            else:
+                self.set_validation_status(exc.usermessage)
+                fingerprint = certs.get_cert_fingerprint(
+                    domain=domain, sep=" ")
+
+                # it's ok if we've trusted this fgprt before
+                trustedcrts = self.wizard().trusted_certs
+                if trustedcrts and fingerprint.replace(' ', '') in trustedcrts:
+                    pass
+                else:
+                    # let your user face panick :P
+                    self.add_cert_info(fingerprint)
+                    self.did_cert_check = True
+                    self.completeChanged.emit()
+                    return False
+
+        except baseexceptions.LeapException as exc:
+            self.set_validation_status(exc.usermessage)
+            return False
+
+        # try download provider info...
+        eipconfigchecker.fetch_definition(domain=domain)
+        wizard.set_providerconfig(
+            eipconfigchecker.defaultprovider.config)
+
+        # all ok, go on...
+        return True
+
+    def nextId(self):
+        wizard = self.wizard()
+        if not wizard:
+            return
+        return wizard.get_page_index('providerinfo')
diff --git a/src/leap/gui/firstrun/wizard.py b/src/leap/gui/firstrun/wizard.py
new file mode 100755
index 00000000..fb601714
--- /dev/null
+++ b/src/leap/gui/firstrun/wizard.py
@@ -0,0 +1,269 @@
+#!/usr/bin/env python
+import logging
+
+import sip
+sip.setapi('QString', 2)
+sip.setapi('QVariant', 2)
+
+from PyQt4 import QtCore
+from PyQt4 import QtGui
+
+from leap.base import checks as basechecks
+from leap.crypto import leapkeyring
+from leap.eip import checks as eipchecks
+
+from leap.gui import firstrun
+
+from leap.gui import mainwindow_rc
+
+try:
+    from collections import OrderedDict
+except ImportError:
+    # We must be in 2.6
+    from leap.util.dicts import OrderedDict
+
+logger = logging.getLogger(__name__)
+
+"""
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+Work in progress!
+~~~~~~~~~~~~~~~~~~~~~~~~~~
+This wizard still needs to be refactored out.
+
+TODO-ish:
+
+[X] Break file in wizard / pages files (and its own folder).
+[ ] Separate presentation from logic.
+[ ] Have a "manager" class for connections, that can be
+    dep-injected for testing.
+[ ] Document signals used / expected.
+[ ] Separate style from widgets.
+[ ] Fix TOFU Widget for provider cert.
+[ ] Refactor widgets out.
+[ ] Follow more MVC style.
+[ ] Maybe separate "first run wizard" into different wizards
+    that share some of the pages?
+"""
+
+
+class FirstRunWizard(QtGui.QWizard):
+
+    def __init__(
+            self,
+            conductor_instance,
+            parent=None,
+            eip_username=None,
+            providers=None,
+            success_cb=None, is_provider_setup=False,
+            trusted_certs=None,
+            netchecker=basechecks.LeapNetworkChecker,
+            providercertchecker=eipchecks.ProviderCertChecker,
+            eipconfigchecker=eipchecks.EIPConfigChecker,
+            start_eipconnection_signal=None,
+            eip_statuschange_signal=None,
+            debug_server=None):
+        super(FirstRunWizard, self).__init__(
+            parent,
+            QtCore.Qt.WindowStaysOnTopHint)
+
+        # we keep a reference to the conductor
+        # to be able to launch eip checks and connection
+        # in the connection page, before the wizard has ended.
+        self.conductor = conductor_instance
+
+        self.eip_username = eip_username
+        self.providers = providers
+
+        # success callback
+        self.success_cb = success_cb
+
+        # is provider setup?
+        self.is_provider_setup = is_provider_setup
+
+        # a dict with trusted fingerprints
+        # in the form {'nospacesfingerprint': ['host1', 'host2']}
+        self.trusted_certs = trusted_certs
+
+        # Checkers
+        self.netchecker = netchecker
+        self.providercertchecker = providercertchecker
+        self.eipconfigchecker = eipconfigchecker
+
+        # debug server
+        self.debug_server = debug_server
+
+        # Signals
+        # will be emitted in connecting page
+        self.start_eipconnection_signal = start_eipconnection_signal
+        self.eip_statuschange_signal = eip_statuschange_signal
+
+        self.providerconfig = None
+        # previously registered
+        # if True, jumps to LogIn page.
+        # by setting 1st page??
+        #self.is_previously_registered = is_previously_registered
+        # XXX ??? ^v
+        self.is_previously_registered = bool(self.eip_username)
+        self.from_login = False
+
+        pages_dict = OrderedDict((
+            ('intro', firstrun.intro.IntroPage),
+            ('providerselection',
+                firstrun.selectprovider.SelectProviderPage),
+            ('login', firstrun.login.LogInPage),
+            ('providerinfo', firstrun.providerinfo.ProviderInfoPage),
+            ('providersetupvalidation',
+                firstrun.providersetup.ProviderSetupValidationPage),
+            ('signup', firstrun.register.RegisterUserPage),
+            ('connecting', firstrun.connect.ConnectingPage),
+            ('lastpage', firstrun.last.LastPage)
+        ))
+        self.add_pages_from_dict(pages_dict)
+
+        self.validation_errors = {}
+
+        self.setPixmap(
+            QtGui.QWizard.BannerPixmap,
+            QtGui.QPixmap(':/images/banner.png'))
+        self.setPixmap(
+            QtGui.QWizard.BackgroundPixmap,
+            QtGui.QPixmap(':/images/background.png'))
+
+        self.setWindowTitle("First Run Wizard")
+
+        # TODO: set style for MAC / windows ...
+        #self.setWizardStyle()
+
+    def add_pages_from_dict(self, pages_dict):
+        """
+        @param pages_dict: the dictionary with pages, where
+            values are a tuple of InstanceofWizardPage, kwargs.
+        @type pages_dict: dict
+        """
+        for name, page in pages_dict.items():
+            # XXX check for is_previously registered
+            # and skip adding the signup branch if so
+            self.addPage(page())
+        self.pages_dict = pages_dict
+
+    def get_page_index(self, page_name):
+        """
+        returns the index of the given page
+        @param page_name: the name of the desired page
+        @type page_name: str
+        @rparam: index of page in wizard
+        @rtype: int
+        """
+        return self.pages_dict.keys().index(page_name)
+
+    def set_validation_error(self, pagename, error):
+        self.validation_errors[pagename] = error
+
+    def get_validation_error(self, pagename):
+        return self.validation_errors.get(pagename, None)
+
+    def set_providerconfig(self, providerconfig):
+        self.providerconfig = providerconfig
+
+    def setWindowFlags(self, flags):
+        logger.debug('setting window flags')
+        QtGui.QWizard.setWindowFlags(self, flags)
+
+    def focusOutEvent(self, event):
+        # needed ?
+        self.setFocus(True)
+        self.activateWindow()
+        self.raise_()
+        self.show()
+
+    def accept(self):
+        """
+        final step in the wizard.
+        gather the info, update settings
+        and call the success callback if any has been passed.
+        """
+        super(FirstRunWizard, self).accept()
+
+        # username and password are in different fields
+        # if they were stored in log_in or sign_up pages.
+        from_login = self.from_login
+        unamek_base = 'userName'
+        passwk_base = 'userPassword'
+        unamek = 'login_%s' % unamek_base if from_login else unamek_base
+        passwk = 'login_%s' % passwk_base if from_login else passwk_base
+
+        username = self.field(unamek)
+        password = self.field(passwk)
+        provider = self.field('provider_domain')
+        remember_pass = self.field('rememberPassword')
+
+        logger.debug('chosen provider: %s', provider)
+        logger.debug('username: %s', username)
+        logger.debug('remember password: %s', remember_pass)
+
+        # we are assuming here that we only remember one username
+        # in the form username@provider.domain
+        # We probably could extend this to support some form of
+        # profiles.
+
+        settings = QtCore.QSettings()
+
+        settings.setValue("FirstRunWizardDone", True)
+        settings.setValue("provider_domain", provider)
+        full_username = "%s@%s" % (username, provider)
+
+        settings.setValue("remember_user_and_pass", remember_pass)
+
+        if remember_pass:
+            settings.setValue("eip_username", full_username)
+            seed = self.get_random_str(10)
+            settings.setValue("%s_seed" % provider, seed)
+
+            # XXX #744: comment out for 0.2.0 release
+            # if we need to have a version of python-keyring < 0.9
+            leapkeyring.leap_set_password(
+                full_username, password, seed=seed)
+
+        logger.debug('First Run Wizard Done.')
+        cb = self.success_cb
+        if cb and callable(cb):
+            self.success_cb()
+
+    def get_provider_by_index(self):
+        provider = self.field('provider_index')
+        return self.providers[provider]
+
+    def get_random_str(self, n):
+        from string import (ascii_uppercase, ascii_lowercase, digits)
+        from random import choice
+        return ''.join(choice(
+            ascii_uppercase +
+            ascii_lowercase +
+            digits) for x in range(n))
+
+
+if __name__ == '__main__':
+    # standalone test
+    # it can be (somehow) run against
+    # gui/tests/integration/fake_user_signup.py
+
+    import sys
+    import logging
+    logging.basicConfig()
+    logger = logging.getLogger()
+    logger.setLevel(logging.DEBUG)
+
+    app = QtGui.QApplication(sys.argv)
+    server = sys.argv[1] if len(sys.argv) > 1 else None
+
+    trusted_certs = {
+        "3DF83F316BFA0186"
+        "0A11A5C9C7FC24B9"
+        "18C62B941192CC1A"
+        "49AE62218B2A4B7C": ['springbok']}
+
+    wizard = FirstRunWizard(
+        None, trusted_certs=trusted_certs,
+        debug_server=server)
+    wizard.show()
+    sys.exit(app.exec_())
diff --git a/src/leap/gui/firstrunwizard.py b/src/leap/gui/firstrunwizard.py
deleted file mode 100755
index 7876c3c8..00000000
--- a/src/leap/gui/firstrunwizard.py
+++ /dev/null
@@ -1,1301 +0,0 @@
-#!/usr/bin/env python
-import logging
-import json
-import socket
-
-import requests
-
-import sip
-sip.setapi('QString', 2)
-sip.setapi('QVariant', 2)
-
-from PyQt4 import QtCore
-from PyQt4 import QtGui
-
-from leap.base import auth
-from leap.base import checks as basechecks
-from leap.base import exceptions as baseexceptions
-from leap.crypto import certs
-from leap.crypto import leapkeyring
-from leap.eip import checks as eipchecks
-from leap.eip import exceptions as eipexceptions
-from leap.gui.progress import ValidationPage
-from leap.util.coroutines import coroutine
-
-from leap.gui import mainwindow_rc
-
-try:
-    from collections import OrderedDict
-except ImportError:
-    # We must be in 2.6
-    from leap.util.dicts import OrderedDict
-
-logger = logging.getLogger(__name__)
-
-APP_LOGO = ':/images/leap-color-small.png'
-
-# bare is the username portion of a JID
-# full includes the "at" and some extra chars
-# that can be allowed for fqdn
-
-BARE_USERNAME_REGEX = r"^[A-Za-z\d_]+$"
-FULL_USERNAME_REGEX = r"^[A-Za-z\d_@.-]+$"
-
-
-ErrorLabelStyleSheet = """
-QLabel { color: red;
-         font-weight: bold}
-"""
-
-
-class FirstRunWizard(QtGui.QWizard):
-
-    def __init__(
-            self,
-            conductor_instance,
-            parent=None,
-            eip_username=None,
-            providers=None,
-            success_cb=None, is_provider_setup=False,
-            trusted_certs=None,
-            netchecker=basechecks.LeapNetworkChecker,
-            providercertchecker=eipchecks.ProviderCertChecker,
-            eipconfigchecker=eipchecks.EIPConfigChecker,
-            start_eipconnection_signal=None,
-            eip_statuschange_signal=None):
-        super(FirstRunWizard, self).__init__(
-            parent,
-            QtCore.Qt.WindowStaysOnTopHint)
-
-        # we keep a reference to the conductor
-        # to be able to launch eip checks and connection
-        # in the connection page, before the wizard has ended.
-        self.conductor = conductor_instance
-
-        self.eip_username = eip_username
-        self.providers = providers
-
-        # success callback
-        self.success_cb = success_cb
-
-        # is provider setup?
-        self.is_provider_setup = is_provider_setup
-
-        # a dict with trusted fingerprints
-        # in the form {'nospacesfingerprint': ['host1', 'host2']}
-        self.trusted_certs = trusted_certs
-
-        # Checkers
-        self.netchecker = netchecker
-        self.providercertchecker = providercertchecker
-        self.eipconfigchecker = eipconfigchecker
-
-        # Signals
-        # will be emitted in connecting page
-        self.start_eipconnection_signal = start_eipconnection_signal
-        self.eip_statuschange_signal = eip_statuschange_signal
-
-        self.providerconfig = None
-        # previously registered
-        # if True, jumps to LogIn page.
-        # by setting 1st page??
-        #self.is_previously_registered = is_previously_registered
-        # XXX ??? ^v
-        self.is_previously_registered = bool(self.eip_username)
-        self.from_login = False
-
-        pages_dict = OrderedDict((
-            # (name, WizardPage)
-            ('intro', IntroPage),
-            ('providerselection',
-                SelectProviderPage),
-            ('login', LogInPage),
-            ('providerinfo', ProviderInfoPage),
-            ('providersetupvalidation', ProviderSetupValidationPage),
-            ('signup', RegisterUserPage),
-            ('connecting', ConnectingPage),
-            ('lastpage', LastPage)
-        ))
-        self.add_pages_from_dict(pages_dict)
-
-        self.validation_errors = {}
-
-        self.setPixmap(
-            QtGui.QWizard.BannerPixmap,
-            QtGui.QPixmap(':/images/banner.png'))
-        self.setPixmap(
-            QtGui.QWizard.BackgroundPixmap,
-            QtGui.QPixmap(':/images/background.png'))
-
-        self.setWindowTitle("First Run Wizard")
-
-        # TODO: set style for MAC / windows ...
-        #self.setWizardStyle()
-
-    def add_pages_from_dict(self, pages_dict):
-        """
-        @param pages_dict: the dictionary with pages, where
-            values are a tuple of InstanceofWizardPage, kwargs.
-        @type pages_dict: dict
-        """
-        for name, page in pages_dict.items():
-            # XXX check for is_previously registered
-            # and skip adding the signup branch if so
-            self.addPage(page())
-        self.pages_dict = pages_dict
-
-    def get_page_index(self, page_name):
-        """
-        returns the index of the given page
-        @param page_name: the name of the desired page
-        @type page_name: str
-        @rparam: index of page in wizard
-        @rtype: int
-        """
-        return self.pages_dict.keys().index(page_name)
-
-    def set_validation_error(self, pagename, error):
-        self.validation_errors[pagename] = error
-
-    def get_validation_error(self, pagename):
-        return self.validation_errors.get(pagename, None)
-
-    def set_providerconfig(self, providerconfig):
-        self.providerconfig = providerconfig
-
-    def setWindowFlags(self, flags):
-        logger.debug('setting window flags')
-        QtGui.QWizard.setWindowFlags(self, flags)
-
-    def focusOutEvent(self, event):
-        # needed ?
-        self.setFocus(True)
-        self.activateWindow()
-        self.raise_()
-        self.show()
-
-    def accept(self):
-        """
-        final step in the wizard.
-        gather the info, update settings
-        and call the success callback if any has been passed.
-        """
-        super(FirstRunWizard, self).accept()
-
-        # username and password are in different fields
-        # if they were stored in log_in or sign_up pages.
-        from_login = self.from_login
-        unamek_base = 'userName'
-        passwk_base = 'userPassword'
-        unamek = 'login_%s' % unamek_base if from_login else unamek_base
-        passwk = 'login_%s' % passwk_base if from_login else passwk_base
-
-        username = self.field(unamek)
-        password = self.field(passwk)
-        provider = self.field('provider_domain')
-        remember_pass = self.field('rememberPassword')
-
-        logger.debug('chosen provider: %s', provider)
-        logger.debug('username: %s', username)
-        logger.debug('remember password: %s', remember_pass)
-
-        # we are assuming here that we only remember one username
-        # in the form username@provider.domain
-        # We probably could extend this to support some form of
-        # profiles.
-
-        settings = QtCore.QSettings()
-
-        settings.setValue("FirstRunWizardDone", True)
-        settings.setValue("provider_domain", provider)
-        full_username = "%s@%s" % (username, provider)
-
-        settings.setValue("remember_user_and_pass", remember_pass)
-
-        if remember_pass:
-            settings.setValue("eip_username", full_username)
-            seed = self.get_random_str(10)
-            settings.setValue("%s_seed" % provider, seed)
-
-            # XXX #744: comment out for 0.2.0 release
-            # if we need to have a version of python-keyring < 0.9
-            leapkeyring.leap_set_password(
-                full_username, password, seed=seed)
-
-        logger.debug('First Run Wizard Done.')
-        cb = self.success_cb
-        if cb and callable(cb):
-            self.success_cb()
-
-    def get_provider_by_index(self):
-        provider = self.field('provider_index')
-        return self.providers[provider]
-
-    def get_random_str(self, n):
-        from string import (ascii_uppercase, ascii_lowercase, digits)
-        from random import choice
-        return ''.join(choice(
-            ascii_uppercase +
-            ascii_lowercase +
-            digits) for x in range(n))
-
-
-class IntroPage(QtGui.QWizardPage):
-    def __init__(self, parent=None):
-        super(IntroPage, self).__init__(parent)
-
-        self.setTitle("First run wizard.")
-
-        #self.setPixmap(
-            #QtGui.QWizard.WatermarkPixmap,
-            #QtGui.QPixmap(':/images/watermark1.png'))
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        label = QtGui.QLabel(
-            "Now we will guide you through "
-            "some configuration that is needed before you "
-            "can connect for the first time.<br><br>"
-            "If you ever need to modify these options again, "
-            "you can find the wizard in the '<i>Settings</i>' menu from the "
-            "main window.<br><br>"
-            "Do you want to <b>sign up</b> for a new account, or <b>log "
-            "in</b> with an already existing username?<br>")
-        label.setWordWrap(True)
-
-        radiobuttonGroup = QtGui.QGroupBox()
-
-        self.sign_up = QtGui.QRadioButton(
-            "Sign up for a new account.")
-        self.sign_up.setChecked(True)
-        self.log_in = QtGui.QRadioButton(
-            "Log In with my credentials.")
-
-        radiobLayout = QtGui.QVBoxLayout()
-        radiobLayout.addWidget(self.sign_up)
-        radiobLayout.addWidget(self.log_in)
-        radiobuttonGroup.setLayout(radiobLayout)
-
-        layout = QtGui.QVBoxLayout()
-        layout.addWidget(label)
-        layout.addWidget(radiobuttonGroup)
-        self.setLayout(layout)
-
-        self.registerField('is_signup', self.sign_up)
-
-    def validatePage(self):
-        return True
-
-    def nextId(self):
-        """
-        returns next id
-        in a non-linear wizard
-        """
-        if self.sign_up.isChecked():
-            next_ = 'providerselection'
-        if self.log_in.isChecked():
-            next_ = 'login'
-        wizard = self.wizard()
-        return wizard.get_page_index(next_)
-
-
-class SelectProviderPage(QtGui.QWizardPage):
-    def __init__(self, parent=None, providers=None):
-        super(SelectProviderPage, self).__init__(parent)
-
-        self.setTitle("Enter Provider")
-        self.setSubTitle(
-            "Please enter the domain of the provider you want "
-            "to use for your connection."
-        )
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        self.did_cert_check = False
-
-        providerNameLabel = QtGui.QLabel("h&ttps://")
-        # note that we expect the bare domain name
-        # we will add the scheme later
-        providerNameEdit = QtGui.QLineEdit()
-        providerNameEdit.cursorPositionChanged.connect(
-            self.reset_validation_status)
-        providerNameLabel.setBuddy(providerNameEdit)
-
-        # add regex validator
-        providerDomainRe = QtCore.QRegExp(r"^[a-z\d_-.]+$")
-        providerNameEdit.setValidator(
-            QtGui.QRegExpValidator(providerDomainRe, self))
-        self.providerNameEdit = providerNameEdit
-
-        # Eventually we will seed a list of
-        # well known providers here.
-
-        #providercombo = QtGui.QComboBox()
-        #if providers:
-            #for provider in providers:
-                #providercombo.addItem(provider)
-        #providerNameSelect = providercombo
-
-        self.registerField('provider_domain*', self.providerNameEdit)
-        #self.registerField('provider_name_index', providerNameSelect)
-
-        validationMsg = QtGui.QLabel("")
-        validationMsg.setStyleSheet(ErrorLabelStyleSheet)
-        self.validationMsg = validationMsg
-
-        # cert info
-
-        # this is used in the callback
-        # for the checkbox changes.
-        # tricky, since the first time came
-        # from the exception message.
-        # should get string from exception too!
-        self.bad_cert_status = "Server certificate could not be verified."
-
-        self.certInfo = QtGui.QLabel("")
-        self.certInfo.setWordWrap(True)
-        self.certWarning = QtGui.QLabel("")
-        self.trustProviderCertCheckBox = QtGui.QCheckBox(
-            "&Trust this provider certificate.")
-
-        self.trustProviderCertCheckBox.stateChanged.connect(
-            self.onTrustCheckChanged)
-
-        layout = QtGui.QGridLayout()
-        layout.addWidget(validationMsg, 0, 2)
-        layout.addWidget(providerNameLabel, 1, 1)
-        layout.addWidget(providerNameEdit, 1, 2)
-
-        # XXX get a groupbox or something....
-        certinfoGroup = QtGui.QGroupBox("Certificate validation")
-        certinfoLayout = QtGui.QVBoxLayout()
-        certinfoLayout.addWidget(self.certInfo)
-        certinfoLayout.addWidget(self.certWarning)
-        certinfoLayout.addWidget(self.trustProviderCertCheckBox)
-        certinfoGroup.setLayout(certinfoLayout)
-
-        layout.addWidget(certinfoGroup, 4, 1, 4, 2)
-        self.certinfoGroup = certinfoGroup
-        self.certinfoGroup.hide()
-
-        #layout.addWidget(self.certInfo, 4, 1, 4, 2)
-        #layout.addWidget(self.certWarning, 6, 1, 6, 2)
-        #layout.addWidget(
-            #self.trustProviderCertCheckBox,
-            #8, 1, 8, 2)
-
-        #self.trustProviderCertCheckBox.hide()
-        self.setLayout(layout)
-
-    def is_insecure_cert_trusted(self):
-        return self.trustProviderCertCheckBox.isChecked()
-
-    def onTrustCheckChanged(self, state):
-        checked = False
-        if state == 2:
-            checked = True
-
-        if checked:
-            self.reset_validation_status()
-        else:
-            self.set_validation_status(self.bad_cert_status)
-
-        # trigger signal to redraw next button
-        self.completeChanged.emit()
-
-    def reset_validation_status(self):
-        """
-        empty the validation msg
-        """
-        self.validationMsg.setText('')
-
-    def set_validation_status(self, status):
-        self.validationMsg.setText(status)
-
-    def add_cert_info(self, certinfo):
-        self.certWarning.setText(
-            "Do you want to <b>trust this provider certificate?</b>")
-        self.certInfo.setText(
-            'SHA-256 fingerprint: <i>%s</i><br>' % certinfo)
-        self.certInfo.setWordWrap(True)
-        self.certinfoGroup.show()
-
-    # pagewizard methods
-
-    def isComplete(self):
-        if not self.did_cert_check:
-            return True
-        if self.is_insecure_cert_trusted():
-            return True
-        return False
-
-    def initializePage(self):
-        self.certinfoGroup.hide()
-
-    def validatePage(self):
-        ##################################
-        # XXX FIXME!
-        ##################################
-        ##################################
-        ##################################
-        ##################################
-        ##### validation skipped !!! #####
-        ##################################
-        ##################################
-        return True
-        ##################################
-        ##################################
-        ##################################
-
-        wizard = self.wizard()
-        netchecker = wizard.netchecker()
-        providercertchecker = wizard.providercertchecker()
-        eipconfigchecker = wizard.eipconfigchecker()
-
-        domain = self.providerNameEdit.text()
-
-        # try name resolution
-        try:
-            netchecker.check_name_resolution(
-                domain)
-
-        except baseexceptions.LeapException as exc:
-            self.set_validation_status(exc.usermessage)
-            return False
-
-        # try https connection
-        try:
-            providercertchecker.is_https_working(
-                "https://%s" % domain,
-                verify=True)
-
-        except eipexceptions.HttpsBadCertError as exc:
-            if self.trustProviderCertCheckBox.isChecked():
-                pass
-            else:
-                self.set_validation_status(exc.usermessage)
-                fingerprint = certs.get_cert_fingerprint(
-                    domain=domain, sep=" ")
-
-                # it's ok if we've trusted this fgprt before
-                trustedcrts = self.wizard().trusted_certs
-                if trustedcrts and fingerprint.replace(' ', '') in trustedcrts:
-                    pass
-                else:
-                    # let your user face panick :P
-                    self.add_cert_info(fingerprint)
-                    self.did_cert_check = True
-                    self.completeChanged.emit()
-                    return False
-
-        except baseexceptions.LeapException as exc:
-            self.set_validation_status(exc.usermessage)
-            return False
-
-        # try download provider info...
-        eipconfigchecker.fetch_definition(domain=domain)
-        wizard.set_providerconfig(
-            eipconfigchecker.defaultprovider.config)
-
-        # all ok, go on...
-        return True
-
-    def nextId(self):
-        wizard = self.wizard()
-        if not wizard:
-            return
-        return wizard.get_page_index('providerinfo')
-
-
-class ProviderInfoPage(QtGui.QWizardPage):
-    def __init__(self, parent=None):
-        super(ProviderInfoPage, self).__init__(parent)
-
-        self.setTitle("Provider Info")
-        self.setSubTitle("Available information about chosen provider.")
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        displayName = QtGui.QLabel("")
-        description = QtGui.QLabel("")
-        enrollment_policy = QtGui.QLabel("")
-        # XXX set stylesheet...
-        # prettify a little bit.
-        # bigger fonts and so on...
-        self.displayName = displayName
-        self.description = description
-        self.enrollment_policy = enrollment_policy
-
-        layout = QtGui.QGridLayout()
-        layout.addWidget(displayName, 0, 1)
-        layout.addWidget(description, 1, 1)
-        layout.addWidget(enrollment_policy, 2, 1)
-
-        self.setLayout(layout)
-
-    def initializePage(self):
-        # XXX get multilingual objects
-        # directly from the config object
-
-        lang = "en"
-        pconfig = self.wizard().providerconfig
-
-        dn = pconfig.get('display_name')
-        display_name = dn[lang] if dn else ''
-        self.displayName.setText(
-            "<b>%s</b>" % display_name)
-
-        desc = pconfig.get('description')
-        description_text = desc[lang] if desc else ''
-        self.description.setText(
-            "<i>%s</i>" % description_text)
-
-        enroll = pconfig.get('enrollment_policy')
-        if enroll:
-            self.enrollment_policy.setText(
-                'enrollment policy: %s' % enroll)
-
-    def nextId(self):
-        wizard = self.wizard()
-        next_ = "providersetupvalidation"
-        return wizard.get_page_index(next_)
-
-
-class ProviderSetupValidationPage(ValidationPage):
-    def __init__(self, parent=None):
-        super(ProviderSetupValidationPage, self).__init__(parent)
-        self.setTitle("Setting up provider")
-        #self.setSubTitle(
-            #"auto configuring provider...")
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-    def _do_checks(self, signal=None):
-        """
-        executes actual checks in a separate thread
-        """
-        import time
-        domain = self.field('provider_domain')
-        wizard = self.wizard()
-        pconfig = wizard.providerconfig
-
-        pCertChecker = wizard.providercertchecker
-        certchecker = pCertChecker(domain=domain)
-
-        signal.emit('Fetching CA certificate')
-        self.progress.setValue(30)
-
-        if pconfig:
-            ca_cert_uri = pconfig.get('ca_cert_uri').geturl()
-        else:
-            ca_cert_uri = None
-
-        # XXX check scheme == "https"
-        # XXX passing verify == False because
-        # we have trusted right before.
-        # We should check it's the same domain!!!
-        # (Check with the trusted fingerprints dict
-        # or something smart)
-
-        #certchecker.download_ca_cert(
-            #uri=ca_cert_uri,
-            #verify=False)
-
-        time.sleep(2)
-
-        signal.emit('Checking CA fingerprint')
-        self.progress.setValue(66)
-        #ca_cert_fingerprint = pconfig.get('ca_cert_fingerprint', None)
-
-        # XXX get fingerprint dict (types)
-        #sha256_fpr = ca_cert_fingerprint.split('=')[1]
-
-        #validate_fpr = certchecker.check_ca_cert_fingerprint(
-            #fingerprint=sha256_fpr)
-        time.sleep(0.5)
-        #if not validate_fpr:
-            # XXX update validationMsg
-            # should catch exception
-            #return False
-
-        signal.emit('Validating api certificate')
-        self.progress.setValue(90)
-
-        #api_uri = pconfig.get('api_uri', None)
-        #try:
-            #api_cert_verified = certchecker.verify_api_https(api_uri)
-        #except requests.exceptions.SSLError as exc:
-            #logger.error('BUG #638. %s' % exc.message)
-            # XXX RAISE! See #638
-            # bypassing until the hostname is fixed.
-            # We probably should raise yet-another-warning
-            # here saying user that the hostname "XX.XX.XX.XX' does not
-            # match 'foo.bar.baz'
-            #api_cert_verified = True
-
-        #if not api_cert_verified:
-            # XXX update validationMsg
-            # should catch exception
-            #return False
-        time.sleep(0.5)
-        #ca_cert_path = checker.ca_cert_path
-
-        self.progress.setValue(100)
-        signal.emit('end_sentinel')
-        time.sleep(1)
-
-    def _do_validation(self):
-        """
-        called after _do_checks has finished
-        (connected to checker thread finished signal)
-        """
-        if self.errors:
-            print 'going back with errors'
-            wizard.set_validation_error(
-                'signup', 'that name is taken')
-            self.go_back()
-        else:
-            print 'going next'
-            self.go_next()
-
-    def nextId(self):
-        wizard = self.wizard()
-        if not wizard:
-            return
-        is_signup = self.field('is_signup')
-        if is_signup is True:
-            next_ = 'signup'
-        if is_signup is False:
-            next_ = 'connecting'
-        return wizard.get_page_index(next_)
-
-
-class UserFormMixIn(object):
-
-    def reset_validation_status(self):
-        """
-        empty the validation msg
-        """
-        self.validationMsg.setText('')
-
-    def set_validation_status(self, msg):
-        """
-        set generic validation status
-        """
-        self.validationMsg.setText(msg)
-
-
-class LogInPage(QtGui.QWizardPage, UserFormMixIn):
-    def __init__(self, parent=None):
-        super(LogInPage, self).__init__(parent)
-
-        self.setTitle("Log In")
-        self.setSubTitle("Log in with your credentials.")
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        userNameLabel = QtGui.QLabel("User &name:")
-        userNameLineEdit = QtGui.QLineEdit()
-        userNameLineEdit.cursorPositionChanged.connect(
-            self.reset_validation_status)
-        userNameLabel.setBuddy(userNameLineEdit)
-
-        # let's add regex validator
-        usernameRe = QtCore.QRegExp(FULL_USERNAME_REGEX)
-        userNameLineEdit.setValidator(
-            QtGui.QRegExpValidator(usernameRe, self))
-        self.userNameLineEdit = userNameLineEdit
-
-        userPasswordLabel = QtGui.QLabel("&Password:")
-        self.userPasswordLineEdit = QtGui.QLineEdit()
-        self.userPasswordLineEdit.setEchoMode(
-            QtGui.QLineEdit.Password)
-        userPasswordLabel.setBuddy(self.userPasswordLineEdit)
-
-        self.registerField('login_userName*', self.userNameLineEdit)
-        self.registerField('login_userPassword*', self.userPasswordLineEdit)
-
-        layout = QtGui.QGridLayout()
-        layout.setColumnMinimumWidth(0, 20)
-
-        validationMsg = QtGui.QLabel("")
-        validationMsg.setStyleSheet(ErrorLabelStyleSheet)
-        self.validationMsg = validationMsg
-
-        layout.addWidget(validationMsg, 0, 3)
-        layout.addWidget(userNameLabel, 1, 0)
-        layout.addWidget(self.userNameLineEdit, 1, 3)
-        layout.addWidget(userPasswordLabel, 2, 0)
-        layout.addWidget(self.userPasswordLineEdit, 2, 3)
-
-        self.setLayout(layout)
-
-        #self.registerField('is_login_wizard')
-
-    def onUserNameEdit(self, *args):
-        if self.initial_username_sample:
-            self.userNameLineEdit.setText('')
-            self.initial_username_sample = None
-
-    # pagewizard methods
-
-    def nextId(self):
-        wizard = self.wizard()
-        if not wizard:
-            return
-        if wizard.is_provider_setup is True:
-            next_ = 'connecting'
-        if wizard.is_provider_setup is False:
-            next_ = 'providersetup'
-        return wizard.get_page_index(next_)
-
-    def initializePage(self):
-        self.userNameLineEdit.setText('username@provider.example.org')
-        self.userNameLineEdit.cursorPositionChanged.connect(
-            self.onUserNameEdit)
-        self.initial_username_sample = True
-
-    def validatePage(self):
-        wizard = self.wizard()
-        eipconfigchecker = wizard.eipconfigchecker()
-
-        full_username = self.userNameLineEdit.text()
-        password = self.userPasswordLineEdit.text()
-        if full_username.count('@') != 1:
-            self.set_validation_status(
-                "Username must be in the username@provider form.")
-            return False
-
-        username, domain = full_username.split('@')
-        self.setField('provider_domain', domain)
-        self.setField('login_userName', username)
-        self.setField('login_userPassword', password)
-
-        # Able to contact domain?
-        # can get definition?
-        # two-by-one
-        try:
-            eipconfigchecker.fetch_definition(domain=domain)
-
-        # we're using requests here for all
-        # the possible error cases that it catches.
-        except requests.exceptions.ConnectionError as exc:
-            self.set_validation_status(exc.message[1])
-            return False
-        except requests.exceptions.HTTPError as exc:
-            self.set_validation_status(exc.message)
-            return False
-        wizard.set_providerconfig(
-            eipconfigchecker.defaultprovider.config)
-
-        # XXX validate user? or we leave that for later?
-        # I think the best thing to do for that is
-        # continue to provider setup page, and if
-        # we catch authentication error there, redirect
-        # again to this page (by clicking "next" to
-        # come here).
-        # Rationale is that we need to verify server certs
-        # and so on.
-
-        # mark that we came from login page.
-        self.wizard().from_login = True
-
-        return True
-
-
-class RegisterUserPage(QtGui.QWizardPage, UserFormMixIn):
-    setSigningUpStatus = QtCore.pyqtSignal([])
-
-    def __init__(self, parent=None):
-        super(RegisterUserPage, self).__init__(parent)
-
-        # bind wizard page signals
-        self.setSigningUpStatus.connect(
-            lambda: self.set_validation_status(
-                'validating'))
-
-        self.setTitle("Sign Up")
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        userNameLabel = QtGui.QLabel("User &name:")
-        userNameLineEdit = QtGui.QLineEdit()
-        userNameLineEdit.cursorPositionChanged.connect(
-            self.reset_validation_status)
-        userNameLabel.setBuddy(userNameLineEdit)
-
-        # let's add regex validator
-        usernameRe = QtCore.QRegExp(BARE_USERNAME_REGEX)
-        userNameLineEdit.setValidator(
-            QtGui.QRegExpValidator(usernameRe, self))
-        self.userNameLineEdit = userNameLineEdit
-
-        userPasswordLabel = QtGui.QLabel("&Password:")
-        self.userPasswordLineEdit = QtGui.QLineEdit()
-        self.userPasswordLineEdit.setEchoMode(
-            QtGui.QLineEdit.Password)
-        userPasswordLabel.setBuddy(self.userPasswordLineEdit)
-
-        userPassword2Label = QtGui.QLabel("Password (again):")
-        self.userPassword2LineEdit = QtGui.QLineEdit()
-        self.userPassword2LineEdit.setEchoMode(
-            QtGui.QLineEdit.Password)
-        userPassword2Label.setBuddy(self.userPassword2LineEdit)
-
-        rememberPasswordCheckBox = QtGui.QCheckBox(
-            "&Remember username and password.")
-        rememberPasswordCheckBox.setChecked(True)
-
-        self.registerField('userName*', self.userNameLineEdit)
-        self.registerField('userPassword*', self.userPasswordLineEdit)
-
-        # XXX missing password confirmation
-        # XXX validator!
-
-        self.registerField('rememberPassword', rememberPasswordCheckBox)
-
-        layout = QtGui.QGridLayout()
-        layout.setColumnMinimumWidth(0, 20)
-
-        validationMsg = QtGui.QLabel("")
-        validationMsg.setStyleSheet(ErrorLabelStyleSheet)
-
-        self.validationMsg = validationMsg
-
-        layout.addWidget(validationMsg, 0, 3)
-        layout.addWidget(userNameLabel, 1, 0)
-        layout.addWidget(self.userNameLineEdit, 1, 3)
-        layout.addWidget(userPasswordLabel, 2, 0)
-        layout.addWidget(userPassword2Label, 3, 0)
-        layout.addWidget(self.userPasswordLineEdit, 2, 3)
-        layout.addWidget(self.userPassword2LineEdit, 3, 3)
-        layout.addWidget(rememberPasswordCheckBox, 4, 3, 4, 4)
-        self.setLayout(layout)
-
-    # overwritten methods
-
-    def initializePage(self):
-        """
-        inits wizard page
-        """
-        provider = self.field('provider_domain')
-        self.setSubTitle(
-            "Register a new user with provider %s." %
-            provider)
-        self.validationMsg.setText('')
-
-    def validatePage(self):
-        """
-        validation
-        we initialize the srp protocol register
-        and try to register user. if error
-        returned we write validation error msg
-        above the form.
-        """
-        # the slot for this signal is not doing
-        # what's expected. Investigate why,
-        # right now we're not giving any feedback
-        # to the user re. what's going on. The only
-        # thing I can see as a workaround is setting
-        # a low timeout.
-        self.setSigningUpStatus.emit()
-
-        username = self.userNameLineEdit.text()
-        password = self.userPasswordLineEdit.text()
-        password2 = self.userPassword2LineEdit.text()
-
-        # have some call to a password checker...
-
-        if password != password2:
-            self.set_validation_status('Password does not match.')
-            return False
-
-        if len(password) < 6:
-            self.set_validation_status('Password too short.')
-            return False
-
-        if password == "123456":
-            # joking
-            self.set_validation_status('Password too obvious.')
-            return False
-
-        domain = self.field('provider_domain')
-
-        # XXX TODO -- remove debug info
-        # XXX get from provider info
-        # XXX enforce https
-        # and pass a verify value
-
-        signup = auth.LeapSRPRegister(
-            schema="http",
-            #provider=domain,
-
-            ###########################
-            # FIXME! REMOVE DEBUG!
-            #
-            # debug -----
-            provider="localhost",
-            #register_path="timeout",
-            port=8000
-        )
-        try:
-            ok, req = signup.register_user(username, password)
-        except socket.timeout:
-            self.set_validation_status(
-                "Error connecting to provider (timeout)")
-            return False
-
-        except requests.exceptions.ConnectionError as exc:
-            logger.error(exc)
-            self.set_validation_status(
-                "Error connecting to provider "
-                "(connection error)")
-            return False
-
-        if ok:
-            return True
-
-        # something went wrong.
-        # not registered, let's catch what.
-        # get timeout
-        # ...
-        if req.status_code == 500:
-            self.set_validation_status(
-                "Error during registration (500)")
-            return False
-
-        validation_msgs = json.loads(req.content)
-        logger.debug('validation errors: %s' % validation_msgs)
-        errors = validation_msgs.get('errors', None)
-        if errors and errors.get('login', None):
-            # XXX this sometimes catch the blank username
-            # but we're not allowing that (soon)
-            self.set_validation_status(
-                'Username not available.')
-        else:
-            self.set_validation_status(
-                "Error during sign up")
-        return False
-
-    def nextId(self):
-        wizard = self.wizard()
-        if not wizard:
-            return
-        return wizard.get_page_index('connecting')
-
-
-class GlobalEIPSettings(QtGui.QWizardPage):
-    """
-    not in use right now
-    """
-    def __init__(self, parent=None):
-        super(GlobalEIPSettings, self).__init__(parent)
-
-
-class ConnectingPage(QtGui.QWizardPage):
-    def __init__(self, parent=None):
-        super(ConnectingPage, self).__init__(parent)
-
-        self.setTitle("Connecting")
-        self.setSubTitle('Connecting to provider.')
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        self.status = QtGui.QLabel("")
-        self.status.setWordWrap(True)
-        self.progress = QtGui.QProgressBar()
-        self.progress.setMaximum(100)
-        self.progress.hide()
-
-        # for pre-checks
-        self.status_line_1 = QtGui.QLabel()
-        self.status_line_2 = QtGui.QLabel()
-        self.status_line_3 = QtGui.QLabel()
-        self.status_line_4 = QtGui.QLabel()
-
-        # for connecting signals...
-        self.status_line_5 = QtGui.QLabel()
-
-        layout = QtGui.QGridLayout()
-        layout.addWidget(self.status, 0, 1)
-        layout.addWidget(self.progress, 5, 1)
-        layout.addWidget(self.status_line_1, 8, 1)
-        layout.addWidget(self.status_line_2, 9, 1)
-        layout.addWidget(self.status_line_3, 10, 1)
-        layout.addWidget(self.status_line_4, 11, 1)
-
-        # XXX to be used?
-        #self.validation_status = QtGui.QLabel("")
-        #self.validation_status.setStyleSheet(
-            #ErrorLabelStyleSheet)
-        #self.validation_msg = QtGui.QLabel("")
-
-        self.setLayout(layout)
-
-        self.goto_login_again = False
-
-    def set_status(self, status):
-        self.status.setText(status)
-        self.status.setWordWrap(True)
-
-    def set_status_line(self, line, status):
-        line = getattr(self, 'status_line_%s' % line)
-        if line:
-            line.setText(status)
-
-    def set_validation_status(self, status):
-        # Do not remember if we're using
-        # status lines > 3 now...
-        # if we are, move below
-        self.status_line_3.setStyleSheet(
-            ErrorLabelStyleSheet)
-        self.status_line_3.setText(status)
-
-    def set_validation_message(self, message):
-        self.status_line_4.setText(message)
-        self.status_line_4.setWordWrap(True)
-
-    def get_donemsg(self, msg):
-        return "%s ... done" % msg
-
-    def run_eip_checks_for_provider_and_connect(self, domain):
-        wizard = self.wizard()
-        conductor = wizard.conductor
-        start_eip_signal = getattr(
-            wizard,
-            'start_eipconnection_signal', None)
-
-        conductor.set_provider_domain(domain)
-        conductor.run_checks()
-        self.conductor = conductor
-        errors = self.eip_error_check()
-        if not errors and start_eip_signal:
-            start_eip_signal.emit()
-
-    def eip_error_check(self):
-        """
-        a version of the main app error checker,
-        but integrated within the connecting page of the wizard.
-        consumes the conductor error queue.
-        pops errors, and add those to the wizard page
-        """
-        logger.debug('eip error check from connecting page')
-        errq = self.conductor.error_queue
-        # XXX missing!
-
-    def fetch_and_validate(self):
-        import time
-        domain = self.field('provider_domain')
-        wizard = self.wizard()
-        #pconfig = wizard.providerconfig
-        eipconfigchecker = wizard.eipconfigchecker()
-        pCertChecker = wizard.providercertchecker(
-            domain=domain)
-
-        # username and password are in different fields
-        # if they were stored in log_in or sign_up pages.
-        from_login = self.wizard().from_login
-        unamek_base = 'userName'
-        passwk_base = 'userPassword'
-        unamek = 'login_%s' % unamek_base if from_login else unamek_base
-        passwk = 'login_%s' % passwk_base if from_login else passwk_base
-
-        username = self.field(unamek)
-        password = self.field(passwk)
-        credentials = username, password
-
-        self.progress.show()
-
-        fetching_eip_conf_msg = 'Fetching eip service configuration'
-        self.set_status(fetching_eip_conf_msg)
-        self.progress.setValue(30)
-
-        # Fetching eip service
-        eipconfigchecker.fetch_eip_service_config(
-            domain=domain)
-
-        self.status_line_1.setText(
-            self.get_donemsg(fetching_eip_conf_msg))
-
-        getting_client_cert_msg = 'Getting client certificate'
-        self.set_status(getting_client_cert_msg)
-        self.progress.setValue(66)
-
-        # Download cert
-        try:
-            pCertChecker.download_new_client_cert(
-                credentials=credentials)
-        except auth.SRPAuthenticationError:
-            self.set_validation_status("Authentication error")
-            #self.set_validation_message(
-                #"Click <i>next</i> to introduce your "
-                #"credentials again")
-            self.goto_login_again = True
-            # We should do something here
-            # but it's broken
-            return False
-
-        time.sleep(2)
-        self.status_line_2.setText(
-            self.get_donemsg(getting_client_cert_msg))
-
-        validating_clientcert_msg = 'Validating client certificate'
-        self.set_status(validating_clientcert_msg)
-        self.progress.setValue(90)
-        time.sleep(2)
-        self.status_line_3.setText(
-            self.get_donemsg(validating_clientcert_msg))
-
-        self.progress.setValue(100)
-        time.sleep(3)
-
-        # here we go! :)
-        self.run_eip_checks_for_provider_and_connect(domain)
-
-        #self.validation_block = self.wait_for_validation_block()
-
-        # XXX signal timeout!
-        return True
-
-    #
-    # wizardpage methods
-    #
-
-    def nextId(self):
-        wizard = self.wizard()
-        # XXX this does not work because
-        # page login has already been met
-        #if self.goto_login_again:
-            #next_ = "login"
-        #else:
-            #next_ = "lastpage"
-        next_ = "lastpage"
-        return wizard.get_page_index(next_)
-
-    def initializePage(self):
-        # XXX if we're coming from signup page
-        # we could say something like
-        # 'registration successful!'
-        self.status.setText(
-            "We have "
-            "all we need to connect with the provider.<br><br> "
-            "Click <i>next</i> to continue. ")
-        self.progress.setValue(0)
-        self.progress.hide()
-        self.status_line_1.setText('')
-        self.status_line_2.setText('')
-        self.status_line_3.setText('')
-
-    def validatePage(self):
-        validated = self.fetch_and_validate()
-        return validated
-
-
-class LastPage(QtGui.QWizardPage):
-    def __init__(self, parent=None):
-        super(LastPage, self).__init__(parent)
-
-        self.setTitle("Connecting to Encrypted Internet Proxy service...")
-
-        self.setPixmap(
-            QtGui.QWizard.LogoPixmap,
-            QtGui.QPixmap(APP_LOGO))
-
-        #self.setPixmap(
-            #QtGui.QWizard.WatermarkPixmap,
-            #QtGui.QPixmap(':/images/watermark2.png'))
-
-        self.label = QtGui.QLabel()
-        self.label.setWordWrap(True)
-
-        self.status_line_1 = QtGui.QLabel()
-        self.status_line_2 = QtGui.QLabel()
-        self.status_line_3 = QtGui.QLabel()
-        self.status_line_4 = QtGui.QLabel()
-
-        layout = QtGui.QVBoxLayout()
-        layout.addWidget(self.label)
-
-        # make loop
-        layout.addWidget(self.status_line_1)
-        layout.addWidget(self.status_line_2)
-        layout.addWidget(self.status_line_3)
-        layout.addWidget(self.status_line_4)
-
-        self.setLayout(layout)
-
-    def set_status_line(self, line, status):
-        statusline = getattr(self, 'status_line_%s' % line)
-        if statusline:
-            statusline.setText(status)
-
-    def set_finished_status(self):
-        self.setTitle('You are now using an encrypted connection!')
-        finishText = self.wizard().buttonText(
-            QtGui.QWizard.FinishButton)
-        finishText = finishText.replace('&', '')
-        self.label.setText(
-            "Click '<i>%s</i>' to end the wizard and "
-            "save your settings." % finishText)
-
-    @coroutine
-    def eip_status_handler(self):
-        logger.debug('logging status in last page')
-        self.validation_done = False
-        status_count = 0
-        try:
-            while True:
-                status = (yield)
-                status_count += 1
-                # XXX add to line...
-                logger.debug('status --> %s', status)
-                self.set_status_line(status_count, status)
-                if status == "connected":
-                    self.set_finished_status()
-                    break
-        except GeneratorExit:
-            pass
-
-    def initializePage(self):
-        wizard = self.wizard()
-        if not wizard:
-            return
-        eip_status_handler = self.eip_status_handler()
-        eip_statuschange_signal = wizard.eip_statuschange_signal
-        if eip_statuschange_signal:
-            eip_statuschange_signal.connect(
-                lambda status: eip_status_handler.send(status))
-
-
-if __name__ == '__main__':
-    # standalone test
-    import sys
-    import logging
-    logging.basicConfig()
-    logger = logging.getLogger()
-    logger.setLevel(logging.DEBUG)
-
-    app = QtGui.QApplication(sys.argv)
-
-    trusted_certs = {
-        "3DF83F316BFA0186"
-        "0A11A5C9C7FC24B9"
-        "18C62B941192CC1A"
-        "49AE62218B2A4B7C": ['springbok']}
-
-    wizard = FirstRunWizard(None, trusted_certs=trusted_certs)
-    wizard.show()
-    sys.exit(app.exec_())
diff --git a/src/leap/gui/styles.py b/src/leap/gui/styles.py
new file mode 100644
index 00000000..759817ce
--- /dev/null
+++ b/src/leap/gui/styles.py
@@ -0,0 +1,4 @@
+ErrorLabelStyleSheet = """
+QLabel { color: red;
+         font-weight: bold}
+"""