/*

* Copyright (c) 2004-2008 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description: 

*	  This class is for security checking of key length of both encryption and pass keys

*

*/

// INCLUDE FILES

#include <btdevice.h>

#include <btextnotifiers.h> // Needed to check the NOTIFIERS_SUPPORT_PASSKEY_MIN_LENGTH flag

#include <hciproxy.h>

#include <btengdomainpskeys.h>

#include "BTSapSecurityHandler.h"

#include "BTSapHciExtensionMan.h"

#include "debug.h"

const TInt KRequiredEncryptionKeyLen = 128;

CBTSapSecurityHandler::CBTSapSecurityHandler()

	: CActive(CActive::EPriorityStandard)

	{

	CActiveScheduler::Add(this);

	}

CBTSapSecurityHandler::~CBTSapSecurityHandler()

	{

	BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  ~CBTSapSecurityHandler")));

	Cancel();

	delete iBtHci;

	if(iBtDeviceArray)

	    {

        iBtDeviceArray->ResetAndDestroy();

        delete iBtDeviceArray;

	    }

	delete iBtDevMan;

	}

// ---------------------------------------------------------

// CBTSapSecurityHandler::NewL()

// ---------------------------------------------------------

//

CBTSapSecurityHandler* CBTSapSecurityHandler::NewL()

	{

	CBTSapSecurityHandler* self = new (ELeave) CBTSapSecurityHandler();

	CleanupStack::PushL(self);

	self->ConstructL();

	CleanupStack::Pop();

	return self;

	}

// ---------------------------------------------------------

// CBTSapSecurityHandler::ConstructL

// ---------------------------------------------------------

//

void CBTSapSecurityHandler::ConstructL()

	{

	BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: ConstructL")));

	iBtDevMan = CBTEngDevMan::NewL(this);

	iBtDeviceArray = new (ELeave) CBTDeviceArray(1);

	iBtHci = CBTHciExtensionMan::NewL();

	}

// ---------------------------------------------------------

// CBTSapSecurityHandler::DoCancel

// ---------------------------------------------------------

//

void CBTSapSecurityHandler::DoCancel()

	{

	BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: DoCancel")));

	if (iSecurityStatus && iSecurityStatus->Int() == KRequestPending)

	    {

	    User::RequestComplete(iSecurityStatus, KErrCancel);

	    }

	}

// ---------------------------------------------------------

// CBTSapSecurityHandler::RunL

// ---------------------------------------------------------

//

TInt CBTSapSecurityHandler::RunError(TInt aError)

    {

	BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: RunError: %d"), aError));    

    switch(iState)

        {

        case EEncryptionKeyLength:

            {

            BTSAP_TRACE_OPT(KBTSAP_TRACE_ERROR, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: RunError: Couldn't get EncryptionKeyLength: %d"), aError));

            User::RequestComplete(iSecurityStatus, static_cast <TInt> (EGetEncryptionKeyFail));

            }

            break;

        case EPassKeyLength:

            {

            User::RequestComplete(iSecurityStatus, static_cast <TInt> (EPassKeyTooShort));

            }

            break;

        default:

            {

            User::RequestComplete(iSecurityStatus, aError);

            }

        }

    return KErrNone;

    }

// ---------------------------------------------------------

// CBTSapSecurityHandler::RunL

// ---------------------------------------------------------

//

void CBTSapSecurityHandler::RunL()

	{

	BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: RunL: %d"), iStatus.Int()));

    TBTSapSecurityCheckResult result = ESecurityOK;

    TBool complete = EFalse;

    User::LeaveIfError(iStatus.Int()); // handle errors in RunError

    switch(iState)

        {

        case EEncryptionKeyLength:

            {

            iBtHci->GetResultL(iEncryptionKeyLength);

            BTSAP_TRACE_OPT(KBTSAP_TRACE_INFO, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: RunL: EncryptionKeyLength: %d"), iEncryptionKeyLength));

            if (iEncryptionKeyLength < KRequiredEncryptionKeyLen)

                {

                result = EEncryptionKeyTooShort;

                complete = ETrue;

                }

            else

                {

                ASSERT(iBtDeviceArray);

                TBTSockAddr sockAddr;

                iSocket->RemoteName(sockAddr);

                TBTRegistrySearch criteria;

                criteria.FindAddress(sockAddr.BTAddr());

                iBtDeviceArray->ResetAndDestroy();

                iBtDevMan->GetDevices(criteria, iBtDeviceArray);

                iState = EPassKeyLength;

                iStatus = KRequestPending;

                SetActive();

                }

            }

            break;

        case EPassKeyLength:

            {

            if (!iBtDeviceArray || !iBtDeviceArray->Count())

                {

                User::Leave(KErrNotFound);

                }

            CBTDevice* device = iBtDeviceArray->At( 0 );

            // When SSP is used, the link key needs to be authenticated,

            // otherwise, the passkey needs to be 16 digits.

            if( device->LinkKeyType() != ELinkKeyAuthenticated )

                {

                BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: unauthenticated link key")));

                if( !( device->LinkKeyType() == ELinkKeyCombination &&

                       device->PassKeyLength() >= KRequiredPassKeyLen ) )

                    {

                    BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: unacceptable link key")));

                    result = EPassKeyTooShort;

                    }

                else if( device->LinkKeyType() == ELinkKeyDebug )

                    {

                    // For SAP, we do an extra check for debug mode, to be really sure.

                    BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: Debug link key, checking debug mode")));

                    TBTSspDebugModeValue debugMode = EBTSspDebugModeOff;

                    TInt err = RProperty::Get( KPSUidBluetoothTestingMode, KBTSspDebugmode, (TInt&) debugMode );

                    if( err || debugMode == EBTSspDebugModeOff )

                        {

                        BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler: debug key not allowed")));

                        result = EPassKeyTooShort;

                        }

                    }

                }

            complete = ETrue;

            }

            break;

        default:

            {

            User::Leave(KErrNotSupported);

            }

        }

    if (complete)

        {

        User::RequestComplete(iSecurityStatus, static_cast <TInt> (result));

        }

	}

// ---------------------------------------------------------

// CBTSapSecurityHandler::CheckSapSecurity

// ---------------------------------------------------------

void CBTSapSecurityHandler::CheckSapSecurity(RSocket& aSocket, TRequestStatus& aStatus)

	{

	BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler::CheckSapSecurity")));

	iSocket = &aSocket;

	iSecurityStatus = &aStatus;

	aStatus = KRequestPending;

    TBTSockAddr sockAddr;

    aSocket.RemoteName(sockAddr);

    TBTDevAddr btAddr = sockAddr.BTAddr();

    TRAPD(err, iBtHci->GetEncryptionKeyLengthL(btAddr, iStatus));

    if (err)

        {

        User::RequestComplete(iSecurityStatus, err);

        }

    else

        {

        iState = EEncryptionKeyLength;

        SetActive();

        }

	}

// ---------------------------------------------------------

// CBTSapSecurityHandler::HandleGetDevicesComplete, from MBTEngDevManObserver

// ---------------------------------------------------------	

void CBTSapSecurityHandler::HandleGetDevicesComplete( TInt aErr, CBTDeviceArray* /*aDeviceArray*/ )

    {

    BTSAP_TRACE_OPT(KBTSAP_TRACE_FUNCTIONS, BTSapPrintTrace(_L("[BTSap]  CBTSapSecurityHandler::HandleGetDevicesComplete")));

    // Complete our own request -> RunL

    TRequestStatus* ownStatus = &iStatus;

    User::RequestComplete(ownStatus, aErr);

    }

//	End of File