/*

* Copyright (c) 2010 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  Device dialog plugin that shows untrusted certificate

*               dialog for TLS server authentication failure errors.

*

*/

#include "untrustedcertificatewidget.h"

#include "untrustedcertificatedefinitions.h"

#include "untrustedcertificateinfobase.h"

#include "untrustedcertificateinfo_symbian.h"

#include <x509cert.h>                   // CX509Certificate

// ======== LOCAL FUNCTIONS ========

// ----------------------------------------------------------------------------

// DoProcessEncodedCertificateL()

// ----------------------------------------------------------------------------

//

UntrustedCertificateInfoBase* DoProcessEncodedCertificateL( const QByteArray &encodedCert )

{

    TPtrC8 ptr8( reinterpret_cast<const TText8*>(encodedCert.constData()), encodedCert.length());

    CX509Certificate* cert = CX509Certificate::NewLC( ptr8 );

    UntrustedCertificateInfoSymbian *info = 0;

    info = new UntrustedCertificateInfoSymbian(*cert);

    CleanupStack::PopAndDestroy( cert );

    return info;

}

// ======== MEMBER FUNCTIONS ========

// ----------------------------------------------------------------------------

// UntrustedCertificateWidget::isInvalidCertificate()

// ----------------------------------------------------------------------------

//

bool UntrustedCertificateWidget::isCertificateValid()

{

    return (mValidationError != ESignatureInvalid && mValidationError != ECertificateRevoked);

}

// ----------------------------------------------------------------------------

// UntrustedCertificateWidget::processEncodedCertificate()

// ----------------------------------------------------------------------------

//

void UntrustedCertificateWidget::processEncodedCertificate(const QByteArray &encodedCert)

{

    UntrustedCertificateInfoBase *info = 0;

    QT_TRAP_THROWING(info = DoProcessEncodedCertificateL(encodedCert));

    if (mCertificateInfo) {

        delete mCertificateInfo;

        mCertificateInfo = 0;

    }

    mCertificateInfo = info;

}

// ----------------------------------------------------------------------------

// UntrustedCertificateWidget::descriptionText()

// ----------------------------------------------------------------------------

//

QString UntrustedCertificateWidget::descriptionText()

{

    QString text;

    if (!isCertificateValid()) {

        //: Information note text shown if the server certificate has an invalid signature

        // TODO: localised UI string

        text = tr("'%1' has sent an invalid certificate. Connection cannot be created.");

    } else if (mValidationError == EValidatedOK || mValidationError == EDateOutOfRange) {

        bool isDateValid = mCertificateInfo->isDateValid();

        bool isSiteValid = mCertificateInfo->commonNameMatches(mServerName);

        if (!isDateValid && !isSiteValid) {

            // TODO: hbTrId("txt_untrustedcert_dialog _accept_site_ood")

            text = tr("'%1' has sent a certificate with different site name and which is out of date. Accept anyway?");

        } else if (!isSiteValid) {

            // TODO: hbTrId("txt_untrustedcert_dialog _accept_site"

            text = tr("'%1' has sent a certificate with different site name. Accept anyway?");

        } else {

            // TODO: hbTrId("txt_untrustedcert_dialog_accept_ood")

            text = tr("'%1' has sent a certificate which is out of date. Accept anyway?");

        }

    } else {

        bool isDateValid = mCertificateInfo->isDateValid();

        bool isSiteValid = mCertificateInfo->commonNameMatches(mServerName);

        if (!isDateValid && !isSiteValid) {

            // TODO: hbTrId("txt_untrustedcert_dialog _accept_untrusted_site_ood"

            text = tr("'%1' has sent an untrusted certificate with different site name and which is out of date. Accept anyway?");

        } else if (!isSiteValid) {

            // TODO: hbTrId("txt_untrustedcert_dialog _accept_untrusted_site"

            text = tr("'%1' has sent an untrusted certificate with different site name. Accept anyway?");

        } else if (!isDateValid) {

            // TODO: hbTrId("txt_untrustedcert_dialog _accept_untrusted_ood")

            text = tr("'%1' has sent an untrusted certificate which is out of date. Accept anyway?");

        } else {

            // TODO: hbTrId("txt_untrustedcert_dialog _accept_untrusted"

            text = tr("'%1' has sent an untrusted certificate. Accept anyway?");

        }

    }

    return text;

}