/*

* Copyright (c) 2001-2006 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  EAP and WLAN authentication protocols.

*

*/

// This is enumeration of EAPOL source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 388 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

#include "eap_am_memory.h"

#include "eap_tools.h"

#include "eap_am_type_tls_peap_symbian.h"

#include "abs_eap_am_crypto.h"

#include "abs_eap_am_mutex.h"

#include "eap_crypto_api.h"

#include "abs_eap_base_type.h"

#include "eap_type_tls_peap_types.h"

#include "eap_am_tools_symbian.h"

#include "abs_tls_am_services.h"

#include "eap_base_type.h"

#include "eap_array_algorithms.h"

#include "EapTlsPeapUtils.h"

#include "EapTlsPeapDbDefaults.h"

#include "EapTlsPeapDbParameterNames.h"

#include "EapTlsPeapCertInterface.h"

#include <x509cert.h>

#include <x509keys.h>

#include "eap_am_dh_primes.h"

#include <asn1dec.h>

#include <asn1enc.h>

#include "EapTlsPeapTimerValues.h"

#include "eap_state_notification.h"

#include "eap_am_trace_symbian.h"

#include "eap_automatic_variable.h"

#if defined(USE_FAST_EAP_TYPE)

#include "abs_tls_am_application_eap_fast.h"

#include "eap_fast_strings.h"

#include "eap_fast_tlv_payloads.h"

//#include "eap_am_async_wait_symbian.h"

#include "EapFastActive.h"

#include "eap_tlv_header.h"

#include "eap_tlv_message_data.h"

#endif

#include "eap_ttls_pap_active.h"

#ifdef USE_PAC_STORE

#include "pac_store_db_symbian.h"

#include <f32file.h>

#endif

#ifdef USE_EAP_EXPANDED_TYPES

#include "eap_header_string.h"

#endif //#ifdef USE_EAP_EXPANDED_TYPES

#if defined(USE_EAP_CONFIGURATION_TO_SKIP_USER_INTERACTIONS)

#include "eap_config.h"

#include "eap_file_config.h"

#include "eap_am_file_input_symbian.h"

#endif

const TUint KMaxSqlQueryLength = 512;

const TUint KMaxDBFieldNameLength = 255;

const TUint KDSASignatureLength = 40;

const TInt 	KDefaultColumnInView_One = 1; // For DB view.

const TInt 	KMicroSecsInASecond = 1000000; // 1000000 micro seconds is 1 second.

/**

 * Length of the MAC address

 */

#ifdef USE_FAST_EAP_TYPE

 const TUint8 KMacAddressLength = 6;

#endif

//--------------------------------------------------

eap_am_type_tls_peap_symbian_c::eap_am_type_tls_peap_symbian_c(

	abs_eap_am_tools_c * const aTools,

	abs_eap_base_type_c * const aPartner,

	const TIndexType aIndexType,

	const TInt aIndex,

	const eap_type_value_e aTunnelingType,

	const eap_type_value_e aEapType,

	const bool aIsClient,

	const eap_am_network_id_c * const receive_network_id)

	: CActive(CActive::EPriorityStandard)

	  , m_index_type(aIndexType)

	  , m_index(aIndex)

	  , m_tunneling_type(aTunnelingType)

	  , m_partner(aPartner)

	  , m_am_tools(static_cast<eap_am_tools_symbian_c*> (aTools))

	  , m_tls_am_partner(0)

#if defined(USE_FAST_EAP_TYPE)

	  , m_tls_application(0)

	  //, iWaitNoteCancelled( EFalse )

      , iEapFastActiveWaitNote( NULL )

      , iEapFastActiveNotes( NULL )

#endif //#if defined(USE_FAST_EAP_TYPE)

	  , m_is_valid(false)

	  , m_is_client(aIsClient)

	  , m_current_eap_type(aEapType)

	  , m_max_count_of_session_resumes(0ul)

	  , m_cipher_suite(tls_cipher_suites_TLS_DHE_DSS_WITH_3DES_EDE_CBC_SHA)

	  , m_ca_certificate(0)

	  , m_own_certificate(0)

	  , m_peer_certificate(0)

	  , m_cert_if(0)

	  , m_receive_network_id(aTools)

	  , m_eap_identifier(0u)

	  , m_subject_key_id(0)

	  , m_allowed_user_certs(1)

	  , m_allowed_server_certs(1)

	  , m_peer_public_key(aTools)

	  , m_param_p(aTools)

	  , m_param_q(aTools)

	  , m_param_g(aTools)

	  , m_shutdown_was_called(false)

	  , m_identity_info(0)

	  , m_tunneled_type(eap_type_none)

	  , m_verify_certificate_realm(true)

	  , m_allow_subdomain_matching(false)

	  , m_latest_alert_description(tls_alert_description_none)

	  , m_use_manual_username(false)

	  , m_manual_username(aTools)

	  , m_use_manual_realm(false)

	  , m_manual_realm(aTools)

	  , m_tls_peap_server_authenticates_client_policy_flag(true)

	  , m_configured(false)

	  , m_max_session_time(0)

#if defined(USE_EAP_TLS_SESSION_TICKET)

	  , m_use_session_ticket(false)

#endif //#if defined(USE_EAP_TLS_SESSION_TICKET)

#if defined(USE_FAST_EAP_TYPE)

	, m_received_tunnel_pac_in_session_ticket(0)

	, m_received_user_authorization_pac_in_session_ticket(0)

	, m_saved_pac_type(eap_fast_pac_type_none)

	, m_completion_operation(eap_fast_completion_operation_none)

	//, m_new_pac_tlv(aTools)

	, m_verification_status(eap_status_process_general_error)

	, m_pac_type(eap_fast_pac_type_none)

	, m_PAC_store_password(aTools)

	//, m_PAC_store_device_seed(aTools)

	, m_imported_PAC_data_password(aTools)

	, m_PAC_store_path(aTools)

	, m_EAP_FAST_IAP_reference(aTools)

	, m_EAP_FAST_Group_reference(aTools)

	, m_EAP_FAST_import_path(aTools)

	, m_eap_fast_completion_status(eap_status_process_general_error)

	, m_eap_fast_pac_store_pending_operation(eap_fast_pac_store_pending_operation_none)

	, m_references_and_data_blocks(aTools)

	, m_new_references_and_data_blocks(aTools)

	, m_ready_references_and_data_blocks(aTools)

	, m_serv_unauth_prov_mode(false)

	, m_serv_auth_prov_mode(false)

	, m_is_notifier_connected(false)

	, m_notifier_data_to_user(NULL)

	, m_notifier_data_pckg_to_user(NULL)

	, m_notifier_data_from_user(NULL)

	, m_notifier_data_pckg_from_user(NULL)

	, m_completed_with_zero(false)

	, m_verificationStatus(false)

	, m_data_reference(m_am_tools)

	, m_notifier_complete(false)

	, m_userResponse(m_am_tools)

	, m_both_completed(0)

	, m_both_asked(0)

#endif //#if defined(USE_FAST_EAP_TYPE)

#ifdef USE_PAC_STORE

	,iPacStoreDb(NULL)

#endif    

#ifdef USE_EAP_CONFIGURATION_TO_SKIP_USER_INTERACTIONS

, m_skip_user_interactions(false)

, m_fileconfig(0)

#endif

    , iEapTtlsPapMaxSessionConfigTime( 0 )

    , iEapTtlsPapActive( NULL )

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

#ifdef USE_EAP_EXPANDED_TYPES

	m_tunneling_vendor_type = m_tunneling_type.get_vendor_type();

	m_current_eap_vendor_type = m_current_eap_type.get_vendor_type();

#else

	m_tunneling_vendor_type = static_cast<TUint>(m_tunneling_type);

	m_current_eap_vendor_type = static_cast<TUint>(m_current_eap_type);

#endif //#ifdef USE_EAP_EXPANDED_TYPES

	// Set the database table name based on the type

	switch (m_current_eap_vendor_type)

	{

		case eap_type_tls:

			m_db_table_name = KTlsDatabaseTableName;

			m_db_user_cert_table_name = KTlsAllowedUserCertsDatabaseTableName;

			m_db_ca_cert_table_name = KTlsAllowedCACertsDatabaseTableName;

			m_db_cipher_suite_table_name = KTlsAllowedCipherSuitesDatabaseTableName;

			m_db_name = KTlsDatabaseName;	

			break;

		case eap_type_peap:

			m_db_table_name = KPeapDatabaseTableName;

			m_db_user_cert_table_name = KPeapAllowedUserCertsDatabaseTableName;

			m_db_ca_cert_table_name = KPeapAllowedCACertsDatabaseTableName;

			m_db_cipher_suite_table_name = KPeapAllowedCipherSuitesDatabaseTableName;

			m_db_name = KPeapDatabaseName;	

			break;

		case eap_type_ttls_plain_pap:

		    // use the same case as for eap_type_ttls;

		    // break is not needed

		case eap_type_ttls:

			m_db_table_name = KTtlsDatabaseTableName;

			m_db_user_cert_table_name = KTtlsAllowedUserCertsDatabaseTableName;

			m_db_ca_cert_table_name = KTtlsAllowedCACertsDatabaseTableName;

			m_db_cipher_suite_table_name = KTtlsAllowedCipherSuitesDatabaseTableName;

			m_db_name = KTtlsDatabaseName;

			break;

#if defined (USE_FAST_EAP_TYPE)

			case eap_type_fast:

			m_db_table_name = KFastGeneralSettingsDBTableName; // General settings

			m_db_fast_special_table_name = KFastSpecialSettingsDBTableName; // Special settings  for only FAST

			m_db_user_cert_table_name = KFastAllowedUserCertsDatabaseTableName;

			m_db_ca_cert_table_name = KFastAllowedCACertsDatabaseTableName;

			m_db_cipher_suite_table_name = KFastAllowedCipherSuitesDatabaseTableName;

			m_db_name = KFastDatabaseName;

			break;

#endif // #if defined (USE_FAST_EAP_TYPE)			

		default:

			{

				// Unsupported type		

				// Should never happen

				EAP_TRACE_ERROR(m_am_tools, 

					TRACE_FLAGS_DEFAULT, (

					EAPL("Unsupported EAP type, m_current_eap_vendor_type=%d \n"),

					m_current_eap_vendor_type));

				return;

			}

	}

	if (receive_network_id != 0

		&& receive_network_id->get_is_valid_data() == true)

	{

		eap_status_e status = m_receive_network_id.set_copy_of_network_id(

			receive_network_id);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			(void)EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

			return;

		}

	}

	set_is_valid();

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

}

//--------------------------------------------------

//

eap_am_type_tls_peap_symbian_c* eap_am_type_tls_peap_symbian_c::NewL(

	abs_eap_am_tools_c * const aTools,

	abs_eap_base_type_c * const aPartner,

	const TIndexType aIndexType,

	const TInt aIndex,

	const eap_type_value_e aTunnelingType,

	const eap_type_value_e aEapType,

	const bool aIsClient,

	const eap_am_network_id_c * const receive_network_id)

{

	if (aEapType != eap_type_tls

		&& aEapType != eap_type_peap

#if defined(USE_TTLS_EAP_TYPE)

		&& aEapType != eap_type_ttls

#endif // #if defined(USE_TTLS_EAP_TYPE)

	    && aEapType != eap_type_ttls_plain_pap

#if defined (USE_FAST_EAP_TYPE)

		&& aEapType != eap_type_fast

#endif // #if defined (USE_FAST_EAP_TYPE)	

		)

	{

		User::Leave(KErrNotSupported);

	}

	eap_am_type_tls_peap_symbian_c* self = new(ELeave) eap_am_type_tls_peap_symbian_c(

		aTools, 

		aPartner, 

		aIndexType, 

		aIndex, 

		aTunnelingType,

		aEapType, 

		aIsClient,

		receive_network_id);

	CleanupStack::PushL(self);

	if (self->get_is_valid() != true)

	{

		User::Leave(KErrGeneral);

	}

	self->ConstructL();

	CleanupStack::Pop();

	return self;

}

//--------------------------------------------------

//

void eap_am_type_tls_peap_symbian_c::ConstructL()

{

	// Open/create database

	EapTlsPeapUtils::OpenDatabaseL(m_database, m_session, m_index_type, m_index, m_tunneling_type, m_current_eap_type);

	m_cert_if = CEapTlsPeapCertInterface::NewL(m_am_tools, this);

	CActiveScheduler::Add(this);

	// Create and open PAC store (only for EAP-FAST at the moment)

#ifdef USE_PAC_STORE

#ifdef USE_FAST_EAP_TYPE

	if(m_current_eap_type == eap_type_fast && iPacStoreDb == NULL)

	{

		iPacStoreDb = CPacStoreDatabase::NewL( this );

		User::LeaveIfNull(iPacStoreDb);

		EAP_TRACE_DEBUG_SYMBIAN(

			(_L("eap_am_type_tls_peap_symbian_c::ConstructL Created PAC store")));	

		iPacStoreDb->OpenPacStoreL();

		EAP_TRACE_DEBUG_SYMBIAN(

			(_L("eap_am_type_tls_peap_symbian_c::ConstructL Opened PAC store")));		

	}

	m_info_array.Reset();

#endif	// End: #ifdef USE_FAST_EAP_TYPE

#endif // End: 	#ifdef USE_PAC_STORE

#ifdef USE_FAST_EAP_TYPE

	if(m_current_eap_type == eap_type_fast)

	{

		m_notifier_data_to_user = new(ELeave) TEapFastNotifierStruct;

		m_notifier_data_pckg_to_user = new(ELeave) TPckg<TEapFastNotifierStruct> (*m_notifier_data_to_user);

		EAP_TRACE_DATA_DEBUG(

			m_am_tools,

			TRACE_FLAGS_DEFAULT,

			(EAPL("eap_am_type_tls_peap_symbian_c::ConstructL m_notifier_data_pckg_to_user"),

			m_notifier_data_pckg_to_user->Ptr(),

			m_notifier_data_pckg_to_user->Size()));	

		m_notifier_data_from_user = new(ELeave) TEapFastNotifierStruct;

		m_notifier_data_pckg_from_user = new(ELeave) TPckg<TEapFastNotifierStruct> (*m_notifier_data_from_user);		

	}	

#endif	// End: #ifdef USE_FAST_EAP_TYPE	

}

//--------------------------------------------------

//

EAP_FUNC_EXPORT eap_status_e eap_am_type_tls_peap_symbian_c::shutdown()

{

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("TLS: %s: function: eap_am_type_tls_peap_symbian_c::shutdown()\n"),

		 (m_is_client == true ? "client": "server")));

	if(IsActive())

	{

	    RDebug::Print( _L("eap_am_type_tls_peap_symbian_c::shutdown() cancelling active object") );

		Cancel();		

	}

	else

	{

		if(m_cert_if->IsActive())

		{

			m_cert_if->Cancel();

		}		

	}

	if ( iEapTtlsPapActive )

		{

		if ( iEapTtlsPapActive->IsActive() )

			{

			EAP_TRACE_DEBUG_SYMBIAN(

				( _L( " eap_am_type_tls_peap_symbian_c::shutdown() \

				Cancelling iEapTtlsPapActive." ) ) );

			iEapTtlsPapActive->Cancel();

			}

		EAP_TRACE_DEBUG_SYMBIAN(

			( _L( " eap_am_type_tls_peap_symbian_c::shutdown() \

			Deleting iEapTtlsPapActive." ) ) );

		delete iEapTtlsPapActive;

		iEapTtlsPapActive = NULL;

		}

#if defined(USE_FAST_EAP_TYPE)		

		if( m_is_notifier_connected )

		{

			EAP_TRACE_DEBUG_SYMBIAN(

				(_L(" eap_am_type_tls_peap_symbian_c::shutdown - calling m_notifier.CancelNotifier")));

			if(IsActive())

				{

				TInt error = m_notifier.CancelNotifier(KEapFastNotifierUid);

				EAP_TRACE_DEBUG_SYMBIAN(

					(_L("eap_am_type_tls_peap_symbian_c::shutdown - CancelNotifier=%d"), error));

				}	

			EAP_TRACE_DEBUG_SYMBIAN(

				(_L(" eap_am_type_securid_symbian_c::shutdown - calling m_notifier.Close()")));

			m_notifier.Close(); // Call close only if it is connected.	

			m_is_notifier_connected = false;

		} // End: if( m_is_notifier_connected )	

		if (m_partner != NULL)

		    {

		    EAP_TRACE_DEBUG_SYMBIAN(

				(_L(" eap_am_type_tls_peap_symbian_c::shutdown - Cancel timers ...")));

		    m_partner->cancel_timer(

				this, 

				KRemoveIAPReferenceTimerID);

		    m_partner->cancel_timer(

				this, 

				KImportFileTimerID);

		    m_partner->cancel_timer(

				this, 

				KCompleteReadPacstoreTimerID);

		    m_partner->cancel_timer(

				this, 

				KHandleReadPacstoreTimerID);

		    EAP_TRACE_DEBUG_SYMBIAN(

				(_L(" eap_am_type_tls_peap_symbian_c::shutdown - Timers canceled")));

		    }

		if ( iEapFastActiveWaitNote )

			{

			if ( iEapFastActiveWaitNote->IsActive() )

				{

				iEapFastActiveWaitNote->Cancel();

				}

			delete iEapFastActiveWaitNote;

			iEapFastActiveWaitNote = NULL;

			}

		if ( iEapFastActiveNotes )

			{

			if ( iEapFastActiveNotes->IsActive() )

				{

			    iEapFastActiveNotes->Cancel();

				}

			delete iEapFastActiveNotes;

			iEapFastActiveNotes = NULL;

			}

#endif // #if defined(USE_FAST_EAP_TYPE)

	m_allowed_server_certs.Reset();

	m_allowed_ca_certs.Close();			

	m_allowed_cipher_suites.Close();			

	m_allowed_user_certs.Reset();			

#ifdef USE_PAC_STORE

#ifdef USE_FAST_EAP_TYPE

	if(m_current_eap_type == eap_type_fast && iPacStoreDb != NULL)

	{

		iPacStoreDb->Close();

	}

	TInt count=0;

	while (count < m_info_array.Count())

		{

		delete m_info_array[count].iData;