/*

* Copyright (c) 2001-2006 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  EAP and WLAN authentication protocols.

*

*/

// This is enumeration of EAPOL source code.

#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

	#undef EAP_FILE_NUMBER_ENUM

	#define EAP_FILE_NUMBER_ENUM 124 

	#undef EAP_FILE_NUMBER_DATE 

	#define EAP_FILE_NUMBER_DATE 1127594498 

#endif //#if defined(USE_EAP_MINIMUM_RELEASE_TRACES)

#include "eap_am_memory.h"

#include "eap_tools.h"

#include "eap_am_tools.h"

#include "eap_core.h"

#include "eap_type_tls_peap_types.h"

#include "tls_record_header.h"

#include "abs_tls_base_application.h"

#include "tls_application_eap_core.h"

#include "tls_peap_types.h"

#include "tls_peap_tlv_header.h"

#include "eap_diameter_avp_header.h"

#include "eap_state_notification.h"

#include "eap_crypto_api.h"

#include "eap_header_string.h"

#include "abs_eap_am_mutex.h"

#include "eap_config.h"

#include "eapol_header.h"

#include "eap_network_id_selector.h"

#include "eap_tlv_message_data.h"

#include "eap_array_algorithms.h"

#include "eap_automatic_variable.h"

#include "eap_base_type.h"

#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

	#include "eap_type_mschapv2_types.h"

	#include "eap_type_mschapv2_header.h"

#endif //#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

//--------------------------------------------------

#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

EAP_FUNC_EXPORT eap_status_e tls_application_eap_core_c::check_ttls_plain_mschapv2_payloads(

	eap_diameter_payloads_c * const payloads,

	eap_ttls_tunneled_message_type_e * const message_type)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("TTLS: %s: tls_application_eap_core_c::check_ttls_plain_mschapv2_payloads()\n"),

		(m_is_client == true ? "client": "server")));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: tls_application_eap_core_c::check_ttls_plain_mschapv2_payloads()");

	*message_type = eap_ttls_tunneled_message_type_none;

	eap_status_e status(eap_status_not_found);

	eap_array_c<eap_diameter_avp_code_c> needed_payloads(m_am_tools);

	if (m_is_client == false)

	{

		{

			// First check are there User-Name, MS-CHAP-Challenge and MS-CHAP2-Response AVPs.

			needed_payloads.reset();

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_user_name(

				eap_diameter_avp_code_user_name);

			status = needed_payloads.add_object(&code_user_name, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap_challenge(

				eap_diameter_vendor_code_of_microsoft_ms_chap_challenge.get_code());

			status = needed_payloads.add_object(&code_ms_chap_challenge, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap2_response(

				eap_diameter_vendor_code_of_microsoft_ms_chap2_response.get_code());

			status = needed_payloads.add_object(&code_ms_chap2_response, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			// Test the required attribute.

			status = payloads->check_payloads_existense(

				&needed_payloads);

			if (status == eap_status_ok)

			{

				// This packet includes required AVPs.

				status = payloads->check_mandatory_payloads(

					&needed_payloads);

				if (status == eap_status_ok)

				{

					// All mandatory AVPs are included.

					*message_type = eap_ttls_tunneled_message_type_ms_chapv2_response;

					EAP_TRACE_DEBUG(

						m_am_tools, 

						TRACE_FLAGS_DEFAULT, 

						(EAPL("Match User-Name, MS-CHAP-Challenge and MS-CHAP2-Response AVPs.\n")));

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

			}

		}

		{

			// Second check are there MS-CHAP-NT-Enc-PW, MS-CHAP2-CPW, and MS-CHAP-Challenge AVPs.

			needed_payloads.reset();

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap_nt_enc_pw(

				eap_diameter_vendor_code_of_microsoft_ms_chap_nt_enc_pw.get_code());

			status = needed_payloads.add_object(&code_ms_chap_nt_enc_pw, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap2_cpw(

				eap_diameter_vendor_code_of_microsoft_ms_chap2_cpw.get_code());

			status = needed_payloads.add_object(&code_ms_chap2_cpw, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap_challenge(

				eap_diameter_vendor_code_of_microsoft_ms_chap_challenge.get_code());

			status = needed_payloads.add_object(&code_ms_chap_challenge, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			// Test the required attribute.

			status = payloads->check_payloads_existense(

				&needed_payloads);

			if (status == eap_status_ok)

			{

				// This packet includes required AVPs.

				status = payloads->check_mandatory_payloads(

					&needed_payloads);

				if (status == eap_status_ok)

				{

					// All mandatory AVPs are included.

					*message_type = eap_ttls_tunneled_message_type_ms_chapv2_change_password;

					EAP_TRACE_DEBUG(

						m_am_tools, 

						TRACE_FLAGS_DEFAULT, 

						(EAPL("Match MS-CHAP-NT-Enc-PW, MS-CHAP2-CPW, and MS-CHAP-Challenge AVPs.\n")));

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

			}

		}

	}

	else //if (m_is_client == true)

	{

		{

			// First check are there MS-CHAP2-Success AVP.

			needed_payloads.reset();

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap2_success(

				eap_diameter_vendor_code_of_microsoft_ms_chap2_success.get_code());

			status = needed_payloads.add_object(&code_ms_chap2_success, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			// Test the required attribute.

			status = payloads->check_payloads_existense(

				&needed_payloads);

			if (status == eap_status_ok)

			{

				// This packet includes required AVPs.

				status = payloads->check_mandatory_payloads(

					&needed_payloads);

				if (status == eap_status_ok)

				{

					// All mandatory AVPs are included.

					*message_type = eap_ttls_tunneled_message_type_ms_chapv2_success;

					EAP_TRACE_DEBUG(

						m_am_tools, 

						TRACE_FLAGS_DEFAULT, 

						(EAPL("Match MS-CHAP2-Success AVP.\n")));

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

			}

		}

		{

			// Second check are there MS-CHAP2-Error AVP.

			needed_payloads.reset();

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			eap_diameter_avp_code_c code_ms_chap_error(

				eap_diameter_vendor_code_of_microsoft_ms_chap_error.get_code());

			status = needed_payloads.add_object(&code_ms_chap_error, false);

			if (status != eap_status_ok)

			{

				EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

				return EAP_STATUS_RETURN(m_am_tools, status);

			}

			// - - - - - - - - - - - - - - - - - - - - - - - - - - - -

			// Test the required attribute.

			status = payloads->check_payloads_existense(

				&needed_payloads);

			if (status == eap_status_ok)

			{

				// This packet includes required AVPs.

				status = payloads->check_mandatory_payloads(

					&needed_payloads);

				if (status == eap_status_ok)

				{

					// All mandatory AVPs are included.

					*message_type = eap_ttls_tunneled_message_type_ms_chapv2_error;

					EAP_TRACE_DEBUG(

						m_am_tools, 

						TRACE_FLAGS_DEFAULT, 

						(EAPL("Match MS-CHAP2-Error AVP.\n")));

					EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

					return EAP_STATUS_RETURN(m_am_tools, status);

				}

			}

		}

	}

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

#endif //#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

//--------------------------------------------------

#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

EAP_FUNC_EXPORT eap_status_e tls_application_eap_core_c::ttls_server_handles_ms_chapv2_response(

	eap_diameter_payloads_c * const /* payloads */,

	const u8_t received_eap_identifier)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("PEAP: %s: function: tls_application_eap_core_c::ttls_server_handles_ms_chapv2_response(): ")

		 EAPL("this = 0x%08x\n"),

		 (m_is_client == true ? "client": "server"),

		 this));

	EAP_TRACE_RETURN_STRING(m_am_tools, "returns: tls_application_eap_core_c::ttls_server_handles_ms_chapv2_response()");

	eap_status_e status(eap_status_not_found);

	eap_diameter_variable_data_c * const user_name_payload

		= m_ttls_received_payloads.get_payload(eap_diameter_avp_code_user_name);

	if (user_name_payload == 0)

	{

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	eap_variable_data_c * const user_name

		= user_name_payload->get_payload_buffer();

	if (user_name->get_is_valid_data() == false)

	{

		return EAP_STATUS_RETURN(m_am_tools, eap_status_header_corrupted);

	}

	status = get_application_partner()->get_ttls_implicit_challenge(

		&m_ttls_implicit_challenge,

		EAP_TTLS_MS_CHAPV2_IMPLICIT_CHALLENGE_FULL_LENGTH);

	if (status != eap_status_ok)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, status);

	}

	const u8_t * const mschapv2_challenge = m_ttls_implicit_challenge.get_data_offset(

		EAP_TTLS_MS_CHAPV2_IMPLICIT_CHALLENGE_OFFSET,

		EAP_TTLS_MS_CHAPV2_IMPLICIT_CHALLENGE_LENGTH);

	if (mschapv2_challenge == 0)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	EAP_TRACE_DATA_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("ttls_server_handles_ms_chapv2_response(): mschapv2_challenge"),

		 mschapv2_challenge,

		 EAP_TTLS_MS_CHAPV2_IMPLICIT_CHALLENGE_LENGTH));

	{

		eap_variable_data_c memory_store_key(m_am_tools);

		eap_status_e status = memory_store_key.set_copy_of_buffer(

			EAP_MSCHAPV2_IMPLICIT_CHALLENGE_HANDLE_KEY,

			sizeof(EAP_MSCHAPV2_IMPLICIT_CHALLENGE_HANDLE_KEY));

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		status = memory_store_key.add_data(

			&m_is_client,

			sizeof(m_is_client));

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		eap_network_id_selector_c state_selector(

			m_am_tools,

			&m_receive_network_id);

		status = memory_store_key.add_data(

			&state_selector);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		eap_tlv_message_data_c tlv_data(m_am_tools);

		status = tlv_data.add_message_data(

			eap_type_mschapv2_implicit_challenge,

			EAP_TTLS_MS_CHAPV2_IMPLICIT_CHALLENGE_LENGTH,

			mschapv2_challenge);

		if (status != eap_status_ok)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		status = m_am_tools->memory_store_remove_data(&memory_store_key);

		if (status != eap_status_ok

			&& status != eap_status_not_found)

		{

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

		status = m_am_tools->memory_store_add_data(

			&memory_store_key,

			&tlv_data,

			eap_type_default_credential_timeout);

		if (status != eap_status_ok)

		{

			EAP_TRACE_DEBUG(

				m_am_tools,

				TRACE_FLAGS_DEFAULT,

				(EAPL("ttls_server_handles_ms_chapv2_response(): cannot store credentials\n")));

			EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

			return EAP_STATUS_RETURN(m_am_tools, status);

		}

	}

	// We must create EAP-Response/Identity message and forward that message

	// to tunneled EAP-MsChapv2.

	u32_t eap_length = eap_header_wr_c::get_header_length() + 1ul + user_name->get_data_length();

	eap_buf_chain_wr_c eap_packet_buffer(

		eap_write_buffer,

		m_am_tools,

		eap_length);

	if (eap_packet_buffer.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	eap_header_wr_c forwarded_eap_packet(

		m_am_tools,

		eap_packet_buffer.get_data(eap_length),

		eap_length);

	if (forwarded_eap_packet.get_is_valid() == false)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	forwarded_eap_packet.reset_header(

		static_cast<u16_t>(eap_length),

		m_use_eap_expanded_type);

	forwarded_eap_packet.set_identifier(received_eap_identifier);

	forwarded_eap_packet.set_code(eap_code_response);

	forwarded_eap_packet.set_length(

		static_cast<u16_t>(eap_length),

		m_use_eap_expanded_type);

	forwarded_eap_packet.set_type(

		eap_type_identity,

		m_use_eap_expanded_type);

	u8_t * const eap_type_data = forwarded_eap_packet.get_type_data(user_name->get_data_length());

	if (eap_type_data == 0)

	{

		EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

		return EAP_STATUS_RETURN(m_am_tools, eap_status_allocation_error);

	}

	m_am_tools->memmove(eap_type_data, user_name->get_data(), user_name->get_data_length());

	set_ttls_tunneled_message_state(eap_ttls_tunneled_message_state_process_identity_response);

	status = packet_forward_to_tunnel(

		&m_receive_network_id,

		&forwarded_eap_packet,

		eap_length);

	EAP_TRACE_END(m_am_tools, TRACE_FLAGS_DEFAULT);

	return EAP_STATUS_RETURN(m_am_tools, status);

}

#endif //#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

//--------------------------------------------------

#if defined(EAP_USE_TTLS_PLAIN_MS_CHAP_V2_HACK)

EAP_FUNC_EXPORT eap_status_e tls_application_eap_core_c::ttls_server_handles_ms_chapv2_change_password(

	eap_diameter_payloads_c * const /* payloads */,

	const u8_t received_eap_identifier)

{

	EAP_TRACE_BEGIN(m_am_tools, TRACE_FLAGS_DEFAULT);

	EAP_TRACE_DEBUG(

		m_am_tools,

		TRACE_FLAGS_DEFAULT,

		(EAPL("TTLS: %s: tls_application_eap_core_c::ttls_server_handles_ms_chapv2_change_password()\n"),

		(m_is_client == true ? "client": "server")));