// Script 2: Test authentication, paspphrase caching, etc

////////////////////////////////////////////////////////////////////////////////

// 0. Initialisation

////////////////////////////////////////////////////////////////////////////////

// First we delete the keystore data file, so that we know we are setting the

// passphrase with our first key add operation.

// Then we set up some keys for the rest of the test script to use:

//

// Key:     Type:

// banana	RSA

// mango	DSA

// tomato	DH

//   test passphrase timeout affects all keys, and all processes

<action>

	<actionname>0.1, Delete keystore data file</actionname>

	<actiontype>deletekeystoredata</actiontype>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>0.2, Opening key store in manager mode</actionname>

	<actiontype>init</actiontype>

	<actionbody>

		<mode>manager</mode>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>0.3 Delete everything</actionname>

	<actiontype>deletekeys</actiontype>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

////////////////////////////////////////////////////////////////////////////////

// 1. Test passphrase caching

////////////////////////////////////////////////////////////////////////////////

// 1.1 Test adding a key leaves it open and with default timeout of 30 seconds

<action>

	<actionname>1.1.1, Add key banana</actionname>

	<actiontype>addkey</actiontype>

	<actionbody>

		<keyusage>allusagesbutNR</keyusage>

		<keysize>512</keysize>

		<keylabel>banana</keylabel>

		<keyalgorithm>RSA</keyalgorithm>

		<keyaccesstype>Extractable</keyaccesstype>

		<passphrase>create flyingelephant</passphrase>

	</actionbody>

	<actionresult> <return>KErrNone</return> </actionresult>

</action>

<action>

	<actionname>1.1.2, Get timeout, expect default of 30 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>30</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.1.3, Get time remaining, expect 30 seconds</actionname>

	<actiontype>timeremaining</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>30</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.1.4, Sign, don't expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.1.5, Add key mango</actionname>

	<actiontype>addkey</actiontype>

	<actionbody>

		<keyusage>DSAUsage</keyusage>

		<keysize>512</keysize>

		<keylabel>mango</keylabel>

		<keyalgorithm>DSA</keyalgorithm>

		<keyaccesstype>Extractable</keyaccesstype>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.1.6, Add key tomato</actionname>

	<actiontype>addkey</actiontype>

	<actionbody>

		<keyusage>Derive</keyusage>

		<keysize>512</keysize>

		<keylabel>tomato</keylabel>

		<keyalgorithm>DH</keyalgorithm>

		<keyaccesstype>Extractable</keyaccesstype>

	</actionbody>

	<actionresult> <return>KErrNone</return> </actionresult>

</action>

<action>

	<actionname>1.1.7, Check everything added ok</actionname>

	<actiontype>listkeys</actiontype>

	<actionbody>

		<foundkey>banana</foundkey>

		<foundkey>mango</foundkey>

		<foundkey>tomato</foundkey>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.1.8, Set passphrase timeout to "don't cache"</actionname>

	<actiontype>settimeout</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>0</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

// 1.2 Test getting and setting the timeout works

// 1.2.1 Test setting timeout via keystore

<action>

	<actionname>1.2.1.1, Set passphrase timeout to 5 seconds via keystore</actionname>

	<actiontype>settimeout</actiontype>

	<actionbody>

		<timeout>5</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.2.1.2, Get timeout on banana, expect 5 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>5</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.2.1.3, Get timeout on mango, expect 5 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>mango</keylabel>

		<timeout>5</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.2.1.4, Get timeout on tomato, expect 5 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>tomato</keylabel>

		<timeout>5</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

// 1.2.2 Test setting timeout via auth object

<action>

	<actionname>1.2.2.1, Set passphrase timeout to 10 seconds via auth object</actionname>

	<actiontype>authsettimeout</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>10</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.2.2.3, Get timeout on banana, expect 10 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>10</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.2.2.4, Get timeout on mango, expect 10 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>mango</keylabel>

		<timeout>10</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.2.1.5, Get timeout on tomato, expect 10 seconds</actionname>

	<actiontype>gettimeout</actiontype>

	<actionbody>

		<keylabel>tomato</keylabel>

		<timeout>10</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

// 1.3 Test cached passphrases expire and that we can get the time remaining

<action>

	<actionname>1.3.1, Get time remaining, expect 0 cos no passphrase cached</actionname>

	<actiontype>timeremaining</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>0</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.2, Sign, expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

		<passphrase>flyingelephant</passphrase>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.3, Get time remaining</actionname>

	<actiontype>timeremaining</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>10</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.4, Wait 5 seconds</actionname>

	<actiontype>sleep</actiontype>

	<actionbody>

		<seconds>5</seconds>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.5, Get time remaining, expect 5 seconds</actionname>

	<actiontype>timeremaining</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>5</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.6, Sign, don't expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.7, Wait another 5 seconds</actionname>

	<actiontype>sleep</actiontype>

	<actionbody>

		<seconds>5</seconds>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.8, Get time remaining, expect 0 again</actionname>

	<actiontype>timeremaining</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<timeout>0</timeout>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.3.9, Sign, expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

		<passphrase>flyingelephant</passphrase>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

// 1.4 Test auth object open and close

<action>

	<actionname>1.4.1.1, Close object</actionname>

	<actiontype>authclose</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.1.2, Sign, expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

		<passphrase>flyingelephant</passphrase>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.1.3, Sign again, don't expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.1.4, Close object</actionname>

	<actiontype>authclose</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.1.5, Open banana</actionname>

	<actiontype>authopen</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<passphrase>flyingelephant</passphrase>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.1.6, Sign again, don't expect passphrase prompt</actionname>

	<actiontype>sign</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

		<open>RSA</open>

		<text>This is text of 20 .</text>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

// 1.4.2 Test that opening/closing a key opens/closes keys all keys we can use

<action>

	<actionname>1.4.2.1, Open mango, don't expect passphrase prompt</actionname>

	<actiontype>authopen</actiontype>

	<actionbody>

		<keylabel>mango</keylabel>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.2.2, Close object</actionname>

	<actiontype>authclose</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.2.3, Open mango, expect passphrase prompt</actionname>

	<actiontype>authopen</actiontype>

	<actionbody>

		<keylabel>mango</keylabel>

		<passphrase>flyingelephant</passphrase>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

<action>

	<actionname>1.4.2.4, Close object again</actionname>

	<actiontype>authclose</actiontype>

	<actionbody>

		<keylabel>banana</keylabel>

	</actionbody>

	<actionresult>

		<return>KErrNone</return>

	</actionresult>

</action>

// 1.4.3 Test that the user gets three attempts to enter the passphrase

<action>