/*
* Copyright (c) 2003-2007 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:  IKEv2 SA
*
*/


#include "ikedebug.h"
#include "ikev2SA.h"
#include "ikepolparser.h"
#include "ikev2ipsecsadata.h"
#include "ikev2pluginsession.h"

static const TUint32 KMinRekeyingThreshold = 70;
static const TUint32 KMaxRekeyingThreshold = 95;

CIkev2SA* CIkev2SA::NewL(CIkev2PluginSession& aIkeV2PluginSession, TIkev2SAData& aIkev2SAdata, MIkeDebug& aDebug)
{
	CIkev2SA *sa = new (ELeave) CIkev2SA(aIkeV2PluginSession, aDebug);
	sa->ConstructL(aIkev2SAdata);
	return sa;
}


CIkev2SA::CIkev2SA(CIkev2PluginSession& aIkeV2PluginSession, MIkeDebug& aDebug)
:CTimer(EPriorityStandard), iIkeV2PluginSession(aIkeV2PluginSession), iDebug(aDebug)
{
    CActiveScheduler::Add(this);
}


void CIkev2SA::ConstructL(TIkev2SAData& aIkev2SAdata)
{
	CTimer::ConstructL();		
	iIkeV2SaData.Copy(aIkev2SAdata);
	//
	// Calculate lifetime value for the new IKE SA
	// The jitter value is adjusted from SA internal ID (SAId mod 8) 
	//
	
	if (iIkeV2SaData.iIkeData->iRekeyingThreshold != 0)
	    {
        if (iIkeV2SaData.iIkeData->iRekeyingThreshold < KMinRekeyingThreshold)
            {
            iRekeyingThreshold = KMinRekeyingThreshold;
            }
        else if (iIkeV2SaData.iIkeData->iRekeyingThreshold > KMaxRekeyingThreshold)
            {
            iRekeyingThreshold = KMaxRekeyingThreshold;
            }
        else
            {
            iRekeyingThreshold = iIkeV2SaData.iIkeData->iRekeyingThreshold;
            }
        TReal lifeTime = (TReal)iIkeV2SaData.iLifetime * ((TReal)iRekeyingThreshold / 100.0);
        iRemainingTime = (TUint32)lifeTime + (iIkeV2SaData.SaId() % 8);
	    }
	else
	    {
        iRemainingTime = iIkeV2SaData.iLifetime + (iIkeV2SaData.SaId() % 8);
	    }
	    
	iIkeV2SaData.iSAState  = KSaStateReady;

	
	TInt DPDHeartbeat = 0;
	if ( iIkeV2SaData.iIkeData->iDPDHeartBeat )
	   DPDHeartbeat = iIkeV2SaData.iIkeData->iDPDHeartBeat;      

	if ( DPDHeartbeat )
	{
		iIkeKeepAlive = CIkeV2KeepAlive::NewL(DPDHeartbeat, *this);
	}
										  
	DEBUG_LOG2(_L("IKEv2 SA constructed, SAId: %d, Lifetime: %d"), iIkeV2SaData.SaId(), iRemainingTime);
	
	StartTimer();
}


CIkev2SA::~CIkev2SA()
{
    if (IsActive())
        Cancel();
	PurgeIpsecDataQue();  	
	iIkeV2SaData.CleanUp();
	delete iIkeKeepAlive;	
}


void CIkev2SA::DoCancel()
{
    CTimer::DoCancel();
}

void CIkev2SA::UpdateL(TIkev2SAData* aIkev2SAdata, TIkeV2IpsecSAData* aIpsecSAdata)
{
    DEBUG_LOG(_L("CIkev2SA::UpdateL"));

	if ( aIkev2SAdata )
	{
	   //
	   // Update IKE Sa data information and reset/restart IKE SA lifetime
	   //
	    iIkeV2SaData.Copy(*aIkev2SAdata);
	    iIkeV2SaData.iSAState = KSaStateReady;		
	}
	if ( aIpsecSAdata )
	{
	   //
	   // Link an Ipsec SA pair information into IKE SA
	   //
		TIkeV2IpsecSAData* IpsecSA = new (ELeave) TIkeV2IpsecSAData(iDebug);
		IpsecSA->Copy(*aIpsecSAdata);
		LinkIpsecSa(IpsecSA);						  
		DEBUG_LOG3(_L("Ipsec SA added into IKE SA, SAId: %d, In SPI: %d, Out SPI: %d"),
				   iIkeV2SaData.SaId(), &aIpsecSAdata->iSPI_In, &aIpsecSAdata->iSPI_Out);
	}
}

TBool CIkev2SA::RemoteAddrChanged(TInetAddr& aNewIp)
{

#if __DEBUG
	TBuf<40> txt_addr;				
	aNewIp.OutputWithScope(txt_addr);
	DEBUG_LOG2(_L("Remote IP changed IKE SA: %d, new address %S"), iIkeV2SaData.SaId(), &txt_addr);
#endif //__DEBUG
	aNewIp = aNewIp; //To silence UREL warnings: contents of DEB macro invisible in UREL builds
	
	return ETrue;
}


TIkeV2IpsecSAData* CIkev2SA::RemoveIpsecSaData(const TDesC8& aInSpi, const TDesC8& aOutSpi)
{ 
    return FindIpsecSaData(aInSpi, aOutSpi, ETrue); 
} 


TIkeV2IpsecSAData* CIkev2SA::FindIpsecSaData(const TDesC8& aInSpi, const TDesC8& aOutSpi, TBool aRemove)
{

    __ASSERT_DEBUG( aInSpi.Length() == 4 || aInSpi.Length() == 0, User::Invariant() );
    __ASSERT_DEBUG( aOutSpi.Length() == 4 || aOutSpi.Length() == 0, User::Invariant() );
    __ASSERT_DEBUG( aInSpi.Length() != 0 || aOutSpi.Length() != 0, User::Invariant() );

	TInt Found = 0;
	if ( aInSpi.Length() > 0 )
		Found ++;
	if ( aOutSpi.Length() > 0 )
		Found ++;
	if ( Found == 0 )
	   return NULL;	

	TInt Match;
	TIkeV2IpsecSAData* Prev = NULL;
	TIkeV2IpsecSAData* Sa   = iIpsecSaQue;

	while ( Sa )
	{
		Match = 0;
		if ( aInSpi.Length() > 0 && (aInSpi.Compare(Sa->iSPI_In) == 0))
           Match ++;   		
		if ( aOutSpi.Length() > 0 && (aOutSpi.Compare(Sa->iSPI_Out) == 0) )
		   Match ++;
		if ( Match == Found )
		{
		   if ( aRemove )
		   {
			  if ( Prev )
				   Prev->iNext = Sa->iNext;
			  else iIpsecSaQue = Sa->iNext;
		   }	   
		   break;
		}
		Prev = Sa;
		Sa   = Sa->iNext;
	}
	return Sa;
}

void CIkev2SA::DeleteIpsecSaData(const TDesC8& aInSpi, const TDesC8& aOutSpi)
{
	TIkeV2IpsecSAData* SaData = FindIpsecSaData(aInSpi, aOutSpi, ETrue);
	if ( SaData )
	{
		SaData->PurgeKeyMaterial();
		SaData->DeleteRekeyData();
		DeleteIpsecSas(SaData);		
		delete SaData;
	}	
}

void CIkev2SA::LinkIpsecSa(TIkeV2IpsecSAData* aSa) 
{
    ASSERT(aSa);
    aSa->iNext = iIpsecSaQue; 
    iIpsecSaQue = aSa;
}   

void CIkev2SA::PurgeIpsecDataQue()
{
	
	TIkeV2IpsecSAData* Sa = iIpsecSaQue;
	while ( iIpsecSaQue )
	{
		iIpsecSaQue = Sa->iNext;
		Sa->PurgeKeyMaterial();
		Sa->DeleteRekeyData();
		DeleteIpsecSas(Sa);
		delete Sa;
		Sa = iIpsecSaQue;
	}	
}

void CIkev2SA::DeleteIpsecSas(TIkeV2IpsecSAData* aSa)
{
    ASSERT(aSa);
	TInetAddr LocalAddr;
	if ( aSa->iSrcSpecific )
		 LocalAddr = iIkeV2SaData.iLocalAddr;
	else LocalAddr.Init(0); 
	LocalAddr.SetPort(0);	
	TInetAddr RemoteAddr = iIkeV2SaData.iRemoteAddr;
	RemoteAddr.SetPort(0);
	if ( aSa->iSPI_In.Length() > 0 ) 
	{
        TUint32 spi;
        TPtr8 spiPtr(reinterpret_cast<TUint8*>(&spi), sizeof(spi));
        spiPtr = aSa->iSPI_In;
		iIkeV2PluginSession.DeleteIpsecSA(spi, RemoteAddr, LocalAddr, aSa->iSaType);
	}
	if ( aSa->iSPI_Out.Length() > 0 )
	{
        TUint32 spi;
        TPtr8 spiPtr(reinterpret_cast<TUint8*>(&spi), sizeof(spi));
        spiPtr = aSa->iSPI_Out;
        iIkeV2PluginSession.DeleteIpsecSA(spi, LocalAddr, RemoteAddr, aSa->iSaType);
	}
}


void CIkev2SA::RunL()
{
	//
	// If IKE SA lifetime expired, delete IKE SA if there is no
	// active IPSEC SA:s alive. If there is rekey IKE SA.
	//
    DEBUG_LOG2(_L("CIkev2SA::RunL, SAId=%d, remaining time=%d"),
            iIkeV2SaData.SaId(), iRemainingTime );
	if (iRemainingTime == 0) 
	{										 		
		if ( iIpsecSaQue && iRekeyingThreshold != 0)
		{
		    iIkeV2PluginSession.RekeyIkeSAL(&iIkeV2SaData);
		}
		else 
		{		 
		    iIkeV2PluginSession.DeleteIkeSAL(&iIkeV2SaData, ETrue); // "Normal" close
		}
	}
	else StartTimer();
	
}

void CIkev2SA::StartTimer()
{
	if (iRemainingTime > KMaxTInt/SECOND)   //To avoid overflowing the Timer
	{
		iRemainingTime -= KMaxTInt/SECOND;
		After(KMaxTInt);
	}
	else    //No overflow
	{
		After(iRemainingTime*SECOND);
		iRemainingTime = 0;
	}
}


void CIkev2SA::EventHandlerL()
{
	//
	// The implementation for class MDpdHeartBeatEventHandler virtual function
	// This method is called by an CIkeKeepAlive object instance when
	// DPD heartbeat timeout has elapsed.
	//
    iIkeV2PluginSession.KeepAliveIkeSAL(&iIkeV2SaData);
}


TIkeV2IpsecSAData* CIkev2SA::GetIpsecSaQue()
{ 
    TIkeV2IpsecSAData* Que = iIpsecSaQue; 
    iIpsecSaQue = NULL; 
    return Que; 
}


void CIkev2SA::SetIpsecSaQue(TIkeV2IpsecSAData* aQue) 
{ 
    if (aQue != NULL) 
        { 
        LinkIpsecSa(aQue); 
        } 
}