/*
* Copyright (c) 2007-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: 
*
*/


/**
 @file 
 @internalComponent
 @released
*/

#include <openssl/rsa.h>
#include <openssl/evp.h>
#include <openssl/objects.h>
#include <openssl/x509.h>
#include <openssl/err.h>
#include <openssl/pem.h>
#include <openssl/evp.h>

#include "sissignaturecertificatechain.h"
#include "signaturecertchaindata.h"
#include "siscertificatechain.h"

#include "exception.h"
#include "utility.h"
#include "sissignature.h"
#include "siscontroller.h" 


CSisSignatureCertificateChain::CSisSignatureCertificateChain (CSignatureCertChainData& aSisSignatureCertChain)
						: iSisSignatureCertChain(aSisSignatureCertChain)
	{
	CSISArray <CSignatureData, CSISFieldRoot::ESISSignature>	&signatures = iSisSignatureCertChain.Signatures();
	int count = signatures.size();
	
	iCertificateChain = new CSisCertificateChain(const_cast<CCertChainData&>(iSisSignatureCertChain.CertificateChain()));
	}


CSisSignatureCertificateChain::~CSisSignatureCertificateChain()
	{
	for(int i = 0; i < iSignatures.size(); ++i)
		{
		delete iSignatures[i];
		}
	iSignatures.clear();
	delete iCertificateChain;
	}

void CSisSignatureCertificateChain::Sign (
		const CSISSignatureAlgorithm::TAlgorithm aAlgorithm, const std::wstring& aCertificate,
		const std::wstring& aPrivateKey, const std::wstring& aPassPhrase,  const TUint8* aBuffer, const TUint32 aBufferSize)
	{
	iCertificateChain->Load (aCertificate);
	CSignatureData signatureContent;
	CSignature* signature = new CSignature(signatureContent);
	if (aAlgorithm != CSISSignatureAlgorithm::EAlgNone)
		{
		signatureContent.SetAlgorithm (aAlgorithm);
		}
	signature->Sign (aPrivateKey, aPassPhrase, aBuffer, aBufferSize);
	iSisSignatureCertChain.AddSignature(signatureContent);
	iSignatures.push_back (signature);
	}


void CSisSignatureCertificateChain::VerifySignature (const CSISController* aController, const TSISStream::pos_type aParentHeaderSize) const
	{
	int signatureCount = iSignatures.size ();
	if (signatureCount != 0)
		{
		X509* x509 = iCertificateChain->GetBottomX509 ();
		if (x509)
			{
			int index;
			try
				{
				for (index = 0; index < signatureCount; index++)
					{
					int size = 0;

					if (iSisSignatureCertChain.PreHeaderPos() <= 0)
						{
						size = aController->BufferSize ();
						}
					else
						{
						size = iSisSignatureCertChain.PreHeaderPos() - aParentHeaderSize;
						assert (size <= aController->BufferSize ());
						}
	
					iSignatures [index]->VerifySignature (x509, aController->RawBuffer(), size);
					}
				}
			catch (...)
				{

				CSignature* signature = iSignatures[index];

				if (!signature->SignatureAlgorithm().IsAlgorithmKnown())
					{
					SISLogger::Log(L"Could not verify signature with unknown algorithm, continuing.\n");
					}
				else
					{
					X509_free (x509);
					SISLogger::Log(L"Could not verify signature with known algorithm, exiting.\n");
					throw;
					}
				}
			X509_free (x509);
			}
		}
	}