/*
* Copyright (c) 2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:
*
*/
#ifndef SECURITYUTILS_H
#define SECURITYUTILS_H

#include <vector>
#include <openssl/x509.h>
#include <openssl/x509v3.h>
#include <openssl/pem.h>
#include <openssl/bio.h>
#include "javajniutils.h"
#include <openssl/sha.h>

namespace java
{
namespace security
{

/*
 * The OID of the certificate extension used to carry the IMEI list information
 * in the Developer Certificates
 */
#define DEVCERT_IMEI_LIST_OID "1.3.6.1.4.1.94.1.49.1.2.2.7"

/*
 * id-kp-codeSigning OID
 */
#define X509_CODE_SIGNING_OID "1.3.6.1.5.5.7.3.3"

/*
 * Nokia Java Code Signing Extension OID
 */
#define NOKIA_CODE_SIGNING_OID "1.3.6.1.4.1.94.1.49.1.2.2.3"

/*
 * The policy identifiers for protection domains. These identifiers are searched
 * into the X.509 certificatePolicies extension
 * ({joint-iso-itu-t(2) ds(5) ce(29) certificatePolicies(32)})
 */
#define DEVCERT_MANUFACTURER_DOMAIN_OID "1.3.6.1.4.1.42.2.110.2.2.2.2"
#define DEVCERT_OPERATOR_DOMAIN_OID "1.3.6.1.4.1.42.2.110.2.2.2.1"
#define DEVCERT_IDENTIFIEDTHIRDPARTY_DOMAIN_OID "1.3.6.1.4.1.42.2.110.2.2.2.3"

/*
 * Internal constants for the protection domains
 */
const int DEVCERT_ANY_DOMAIN = -1;
const int DEVCERT_UNKNOWN_DOMAIN = 0;
const int DEVCERT_MANUFACTURER_DOMAIN = 1;
const int DEVCERT_OPERATOR_DOMAIN = 2;
const int DEVCERT_IDENTIFIEDTHIRDPARTY_DOMAIN = 3;

/* The length of the SHA-1 digest (160 bits) */
const int SHA_1_DIGEST_LEN = 20;

/* The length of the MD5 digest (32 digit hexadecimal number) */
const int MD5_DIGEST_LEN = 8;

/* The length of the message chunks used to compute the hash */
const int SHA_1_HASH_CHUNK_LEN = 128*1024;

/* Types of supported certificates */
const int PEM = 1;
const int DER = 2;

typedef struct cert_details_st
{
    char * issuer;
    char * subject;
    char * organization;
    char * notBefore; /* format is YYYYMMDDHHMMSS */
    char * notAfter; /* format is YYYYMMDDHHMMSS */
    char * serial_number;
    char * fingerprint;
    int domain_category;
} CERT_DETAILS;

typedef struct auth_credentials_st
{
    char * domain_name;
    char * domain_category;
    char * jar_hash;
    char * root_hash;
    char * root_id;
    int chain_index;
    int predefined_domain_category;
    CERT_DETAILS* signing_cert;
} AUTH_CREDENTIALS;

typedef struct auth_info_st
{
    int cert_chain_len;
    char ** cert_chain;
    int signature_len;
    char * signature;
} AUTH_INFO;

class SecurityUtils
{
public:
    static bool areAllCriticalExtsKnown(X509 *);
    static X509 * readCert(const char *, int len, int type);
    static char * encodePEM(const char *, int);
    static void getCertDetails(X509, CERT_DETAILS *, bool);
    static char * computeDigest(const char*);
    static void throw_exception(JNIEnv*, const char *);
    static void getAuthInfo(JNIEnv*, jobjectArray, int, AUTH_INFO *);
    static jobject getJNICertDetails(JNIEnv *, const CERT_DETAILS);
    static jobjectArray getJNIAuthCredentials(JNIEnv *, std::vector<AUTH_CREDENTIALS*>);
    static void computePublicKeyHash(X509 *, char *);
private:
    static bool checkIMEI(const X509_EXTENSION *, const char *);
    static char * computeDigest1(const char*);
};

} //end namespace security
} //end namespace java

#endif // SECURITYUTILS_H