/*

* Copyright (c) 2004, 2010 Nokia Corporation and/or its subsidiary(-ies). 

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:   This file contains the implementation of CCrPKCS12 class. 

*

*/

//  INCLUDE FILES

#include "crpkcs12.h"

#include <crdefs.h>      // CCrDefines

#include <e32std.h>

#include <x509certext.h>

const TInt KX509Version3 = 3;

// -----------------------------------------------------------------------------

// CPKCS12SyncWrapper

// Constructor

// -----------------------------------------------------------------------------

//

CCrPKCS12::CPKCS12SyncWrapper::CPKCS12SyncWrapper(): CActive( EPriorityStandard )

    {

    CActiveScheduler::Add( this );

    }

// -----------------------------------------------------------------------------

// CPKCS12SyncWrapper

// Destructor

// -----------------------------------------------------------------------------

//

CCrPKCS12::CPKCS12SyncWrapper::~CPKCS12SyncWrapper()

    {

    if (iSecDlg)

        {

		iSecDlg->Release();

        }

    }

// -----------------------------------------------------------------------------

// CPKCS12SyncWrapper

// EnterPassword wrapper function.

// -----------------------------------------------------------------------------

//

TInt CCrPKCS12::CPKCS12SyncWrapper::EnterPasswordL(const TPINParams& aPINParams, TBool aRetry, TPINValue& aPINValue)

    {

    iSecDlg = SecurityDialogFactory::CreateL();

    iSecDlg->EnterPIN(aPINParams, aRetry, aPINValue, iStatus);

    return SetActiveAndWait();

    }

// -----------------------------------------------------------------------------

// CPKCS12SyncWrapper::SetActiveAndWait

// 

// -----------------------------------------------------------------------------

//

TInt CCrPKCS12::CPKCS12SyncWrapper::SetActiveAndWait()

    {

    SetActive();

    iWait.Start();

    return iStatus.Int();

    }

// -----------------------------------------------------------------------------

// CPKCS12SyncWrapper::DoCancel

// 

// -----------------------------------------------------------------------------

//

void CCrPKCS12::CPKCS12SyncWrapper::DoCancel()

    {

    }

// -----------------------------------------------------------------------------

// CPKCS12SyncWrapper::RunL

// 

// -----------------------------------------------------------------------------

//

void CCrPKCS12::CPKCS12SyncWrapper::RunL()

    {

    iWait.AsyncStop();

    }

// -----------------------------------------------------------------------------

// CCrPKCS12

// Constructor

// This function constructs CCrPKCS12 object

// Return Values:  None

// -----------------------------------------------------------------------------

CCrPKCS12::CCrPKCS12():iIter(1), iPrivateKeyIdArray(1), iSafeBagsCount(0)

    {

    // Default iteration count is 1.

    }

// -----------------------------------------------------------------------------

// CCrPKCS12::ConstructL

// This function initializes CCrPKCS12 object's member objects.

// Parameters:     None

// Return Values:  None

// -----------------------------------------------------------------------------

void CCrPKCS12::ConstructL()

    {

  	iberSet = CCrBerSet::NewL( 1 );

    iUserCertificates = CX509CertificateSet::NewL( 1 );

    iCACertificates = CX509CertificateSet::NewL( 1 );

    iUserCertificateBuffer = new (ELeave) CArrayPtrFlat<TDesC8>(1);

    iCACertificateBuffer = new (ELeave) CArrayPtrFlat<TDesC8>(1);

    iPKCS8PrivateKeyArray = new (ELeave) CArrayPtrFlat<HBufC8>(1);

    }

// -----------------------------------------------------------------------------

// CCrPKCS12

// Destructor

// This function destructs CCrPKCS12 object

// Return Values:  None

// -----------------------------------------------------------------------------

CCrPKCS12::~CCrPKCS12()

    {    

    delete iberSet;

    delete iUserCertificates;

    delete iCACertificates;

    if (iUserCertificateBuffer)

        {

        iUserCertificateBuffer->ResetAndDestroy();

        delete iUserCertificateBuffer;

        }

    if (iCACertificateBuffer)

        {

        iCACertificateBuffer->ResetAndDestroy();

        delete iCACertificateBuffer;

        }

    delete iMac;

    delete iSalt;

    delete iPassWord;    

    delete iContentInfo;

    delete iBags;    

    delete iDecryptionKey;

    if (iPKCS8PrivateKeyArray)

        {        

        iPKCS8PrivateKeyArray->ResetAndDestroy();    

        delete iPKCS8PrivateKeyArray;

        }

    iPrivateKeyIdArray.ResetAndDestroy();

    }

// -----------------------------------------------------------------------------

// CCrPKCS12::NewLC

// This function implements the two-phase construction of CCrPKCS12

// class. The function uses standard constructor to reserve memory

// for pkcs12-object, stores a pointer to the object into clean up

// stack, and returns the pointer to the object.

// Parameters:     None.

// Return Values:  CCrPKCS12*     Pointer to the CCrPKCS12 object.

// -----------------------------------------------------------------------------

CCrPKCS12* CCrPKCS12::NewLC()

    {

    CCrPKCS12* self = new ( ELeave ) CCrPKCS12();

    CleanupStack::PushL( self );

    self->ConstructL();

    return self; 

    }

// -----------------------------------------------------------------------------

// CCrPKCS12::NewL

// This function implements the two-phase construction of CCrPKCS12

// class. The function reserves memory for pkcs12-object and

// returns pointer to that object. This function uses NewLC to create

// the object and store it to cleanup stack. Finally the object is popped

// from clean up stack.

// Parameters:     None.

// Return Values:  CCrPKCS12*    Pointer to the CCrPKCS12 object.

// -----------------------------------------------------------------------------

CCrPKCS12* CCrPKCS12::NewL()

    {

    CCrPKCS12* self = NewLC();

    CleanupStack::Pop();

    return self; 

    }

// -----------------------------------------------------------------------------

// CCrPKCS12::Open

// Opens pkcs12-file from location given in parameter afilePath,

// then it makes a CCrBer::berSet from it. Then it starts testing

// berObjects from berSet. When it comes long enough, needed

// information can be get and stored to CCrPKCS12-Class' members.

// Parameters: CCrData& aPkcs12File    PKCS #12 file.

//             TBuf<48> aPassWord      password.

// Returns:    TCrStatus               Value of error.

// -----------------------------------------------------------------------------

TCrStatus CCrPKCS12::OpenL(CCrData&       aPkcs12File, 

                          const TDesC16& aPassword)

    {

    TCrStatus status = KCrOK;

    TInt errData = KErrNone;

    if (!iberSet)

        {

        User::Leave(KErrGeneral);

        }

    // Number of extracted BER objects.

    TInt numberOfBerObjects = 0;

    // make berSet, set of berObjects

    TRAP( errData,numberOfBerObjects = iberSet->OpenL( &aPkcs12File,KOpenAllLevels ));        

    if ( errData < KErrNone )

        {

        return KCrPkcs12 | KCrBerLibraryError;

        }

    // number of ber objects must be > 0.

    if (numberOfBerObjects < 1)

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iObjectNum = KFirstObject;

    // Now we have the first object

    iberObject = iberSet->At( iObjectNum );

    // File opened successfully, let's start testing berObjects.

    // 1. Test, is berObject Sequence?

	if ( !iberObject->IsSeqOrSet( iberObject->Type() ) )			

	    {

		return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum );

    // 2. Test, is an integer?

    if ( iberObject->Type() != KBerInteger )					

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    TInt version = 0;

    TRAP( errData,version = iberObject->GetIntegerL() );       

    if ( errData < KErrNone )

        {

        return KCrPkcs12 | KCrBerLibraryError;

        }

    // 3. Test, is version 3?

    if ( version != KVersion3 )				

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    // Is there still ber objects?

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum );

    // 4. Test, is Seq?

    if ( !iberObject->IsSeqOrSet( iberObject->Type() ) )			

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    // Remember where we are.

    TInt place = iObjectNum;

    // Is there still ber objects?

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum );

    CCrData* contentInfo = NULL;

    TRAP (errData, contentInfo = CCrData::NewL(EFalse));

    if (errData < KErrNone)

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNoMemory; 

        }

    if ( !ReadContentInfo(*contentInfo ) )

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotPasswordBasedEncryption;

        }

    iberObject = iberSet->At( place );

    iObjectNum += JumpNextObjectAtSameLevel();

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At( iObjectNum );

    // 5. Test, is Seq?

    if ( !iberObject->IsSeqOrSet( iberObject->Type() ) )			

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum );

    // 6. Test, is Seq?

    if ( !iberObject->IsSeqOrSet( iberObject->Type() ) )			

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum ); 

     // 6. Test, is Seq?

    if ( iberObject->IsSeqOrSet( iberObject->Type() ) )

        {

        iObjectNum++;

        if (numberOfBerObjects < iObjectNum)

            {

            delete contentInfo;

            contentInfo = NULL;

            return KCrPkcs12 | KCrNotValidPkcs12Object;

            }

         iberObject = iberSet->At(iObjectNum );

        }

    // 7. Test, is OID?

    if ( iberObject->Type() != KBerOid)			

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    HBufC* oid = NULL;

    TRAP(errData, oid = iberObject->GetOidL() );

    if ( errData < KErrNone )

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrBerLibraryError;

        }

    // 8. What is used HMAC-algorithm??

    if ( *oid == KCrSha1 )										

        {  

        iHMACalgorithm = ECrSHA1; 

        }

    else if ( *oid == KCrMD5 )

        {

        iHMACalgorithm = ECrMD5;

        }   

    else

        {

        delete oid;

        oid = NULL;

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotSupportedHMACalgorithm;

        }

    delete oid;

    oid = NULL;

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum);

    // If Octet String, read mac // Case in Outlook

    if (iberObject->Type() == KBerOctetString)

        {

        }

    else

        {

        // 9. Test, is Null Tag?

        if ( iberObject->Type() != KBerNull )

            {

            delete contentInfo;

            contentInfo = NULL;

            return KCrPkcs12 | KCrNotValidPkcs12Object;

            }

        iObjectNum++;

        if (numberOfBerObjects < iObjectNum)

            {

            delete contentInfo;

            contentInfo = NULL;

            return KCrPkcs12 | KCrNotValidPkcs12Object;

            }

        iberObject = iberSet->At(iObjectNum);

        // If Octet String, read mac

        if ( iberObject->Type() != KBerOctetString )

            {

            delete contentInfo;

            contentInfo = NULL;

            return EFalse;

            }

        } 

    // This is where needed data can be get

    TRAP( errData,iMac = iberObject->GetOctetStringL() );

    if ( errData < KErrNone )

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrBerLibraryError;

        }

    iObjectNum++;

    if (numberOfBerObjects < iObjectNum)

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    iberObject = iberSet->At(iObjectNum );

    // If Octet String, read salt, if OctetString can be found,

    // validate of this file is OK.

    if ( iberObject->Type() != KBerOctetString )

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrNotValidPkcs12Object;

        }

    TRAP( errData,iSalt = iberObject->GetOctetStringL() );        

    if ( errData < KErrNone )

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrBerLibraryError;

        }

    // Here's optional integer value

    if ( iberSet->Count() > ++iObjectNum )

        {

        iberObject = iberSet->At( iObjectNum );

        // If here is an integer, then read the number of iterations,

        // otherwise leave DEFAULT value ( = 1, given in constructor).

        if ( iberObject->Type() == KBerInteger )	

            {

            TRAP( errData,iIter = iberObject->GetIntegerL() );

            if ( errData < KErrNone )

                {

                delete contentInfo;

                contentInfo = NULL;

                return KCrPkcs12 | KCrBerLibraryError;

                }

            }

        }

    // Verify Mac.

    TBool result = EFalse;

    TRAP(errData, result = VerifyMacL(aPassword));

    if ( errData < KErrNone )

        {

        delete contentInfo;

        contentInfo = NULL;

        return KCrPkcs12 | KCrWrongPassWordOrCorruptedFile;

        }

    if ( result)

        {

       // If password was OK, open ContentInfo

        if ( !UnpackContentInfo(*contentInfo))

            {

            delete contentInfo;

            contentInfo = NULL;

            return KCrPkcs12 | KCrNotPasswordBasedEncryption;

            }