/*
* Copyright (c) 1998-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: 
*
*/


#if !defined(__E32STD_H__)
#include <e32std.h>
#endif

#if !defined (__BADESCA_H__)
#include <badesca.h>
#endif

#include <x509certchain.h>

_LIT(KCorrectFile1, "correctchain.txt");

//certs
//thawte root
_LIT(KTWSSRoot, "thawteserverca.cer");
//rsa/verisign root
_LIT(KRSASSCA, "vsignss.cer");
_LIT(KRSASSCA_OLD, "rsassca_old.crt");
	_LIT(KDashnet, "dashnet.crt");
	_LIT(K3Do, "3do.crt");

_LIT(KVSignCA3, "verisignclass3primaryca.cer");
	_LIT(KVSignServer3, "verisignserverclass3.crt");
		_LIT(KLloyds, "lloyds.crt");

_LIT(KRoot, "CA3_root.crt");
	_LIT(KCA2, "CA2.crt");
		_LIT(KCA1, "CA1.crt");
			_LIT(KEE, "EE.crt");
//noise
_LIT(KCA1SameDN, "CA1_H_sameDN.crt");
_LIT(KCA2SameDN, "CA2_H_sameDN.crt");
_LIT(KExtra, "interclear.crt");
//
_LIT(KGSRoot, "globalsignroot.cer");
	_LIT(KGSPC1, "globalsignprimaryclass1ca.cer");
		_LIT(KGSC1, "globalsignclass1ca.cer");
			_LIT(KGSWB, "willsglobalsign.crt");

//fortezza test certs
//1st hierachy
_LIT(KFortezzaPAA1, "x22paa.crt");
	_LIT(KFortezzaPCA1, "x22pca1.crt");
		_LIT(KFortezzaCA1, "x22ca1.crt");
			//user certs off this...
			_LIT(KFortezzaCA1EE1, "rich1.crt");
			_LIT(KFortezzaCA1EE2, "david1.crt");
			_LIT(KFortezzaExpired, "expired.crt");
			_LIT(KFortezzaFuture, "future.crt");
			_LIT(KFortezzaNameMismatch, "nameMismatch.crt");
			_LIT(KFortezzaInvalidSig, "invalidSig.crt");
			//next one just tests CRL-related errors, so should validate OK
			_LIT(KFortezzaKeyCompromise, "KeyCompromise.crt");
			_LIT(KFortezzaBadSubjName1, "BadSubjName1.crt");
			_LIT(KFortezzaBadSubjName2, "BadSubjName2.crt");
			_LIT(KFortezzaInvalidConstraints, "InvalidConstraints.crt");
		//other sub-hierachies
		_LIT(KFortezzaTestCA2, "testCA2.crt");
			_LIT(KFortezzaTestSubCA2, "testSubCA.crt");
				_LIT(KFortezzaPathLen, "pathLen.crt");
		_LIT(KFortezzaBadCA1, "BadCA1.crt");
			_LIT(KFortezzaInvalidCAUser1, "InvalidCAUser1.crt");
		_LIT(KFortezzaBadCA2, "BadCA2.crt");
			_LIT(KFortezzaInvalidCAUser2, "InvalidCAUser2.crt");
//2nd hierachy
_LIT(KFortezzaPAA2, "rn_paa.crt");
	_LIT(KFortezzaPCA2, "rn_pca.crt");
		_LIT(KFortezzaCA2, "rn_ca.crt");
			_LIT(KFortezzaCA2EE1, "rn_user1.crt");		
			_LIT(KFortezzaCA2BadAltName, "rn_BadAltName.crt");		
			_LIT(KFortezzaCA2BadPolicy, "rn_BadPolicy.crt");

//3rd hierachy
_LIT(KMedRootCA, "1A.cer");
	_LIT(KMedCA1, "24.cer");
		_LIT(KMedCA1EE1, "11C5.cer");
		_LIT(KMedCA1EE2, "139F.cer");

//cross certificate
_LIT(KFortezzaX22RNCrossCert, "rn_cross.crt");

//FINEID certificates
_LIT(KFINEIDCitizenCA, "citizen-ca.crt");
	_LIT(KFINEIDLipponenSign, "lipponen-sign.crt");
	_LIT(KFINEIDLipponenEncrypt, "lipponen-encrypt.crt");
_LIT(KFINEIDTestCA3, "finsign-test3-ca.crt");
	_LIT(KFINEIDHelsinkiSign, "helsinki-sign.crt");
	_LIT(KFINEIDHelsinkiEncrypt, "helsinki-encrypt.crt");

//apache
_LIT(KApacheRSARoot, "ca-rsa.crt");
	_LIT(KApacheRSAServer, "rsa.crt");
_LIT(KApacheDSARoot, "ca-dsa.crt");
	_LIT(KApacheDSAServer, "dsa.crt");

//policy testing
_LIT(KX22Policy, "2.16.840.1.101.2.1.11");
_LIT(KRNPolicy, "2.16.840.1.101.2.1.11.2");
//_LIT(KExtraBogusPolicy, "2.16.840.1.101.2.1.11.4");
_LIT(KExtraBogusPolicy, "bogus!!");

class CTestChain : public CBase
	{
public:
	~CTestChain();
	CTestChain();
	virtual void ConstructL();
	CDesCArray* iServerCerts;
	CDesCArray* iRootCerts;
	CDesCArray* iExtraCerts;
	};
			
class CTestChainBuild : public CTestChain
	{
public:
	static CTestChainBuild* NewL();
	static CTestChainBuild* NewLC();
	~CTestChainBuild();
	HBufC* iCorrectChain;
	};

class CTestChainValidate : public CTestChain
	{
public:
	static CTestChainValidate* NewL();
	static CTestChainValidate* NewLC();
	void ConstructL();
	~CTestChainValidate();
	TValidationStatus* iError;
	CArrayFixFlat<TValidationStatus>* iWarnings;
	CDesCArray* iPolicies;
	};

class TestSpec
	{
public:
	TestSpec();
//chain build tests
	CTestChainBuild*  TestBuildSpec1();
	CTestChainBuild*  TestBuildSpec2();
	CTestChainBuild*  TestBuildSpec3();
	CTestChainBuild*  TestBuildSpec4();
	CTestChainBuild*  TestBuildSpec5();
	CTestChainBuild*  TestBuildSpec6();

	CTestChainBuild*  TestBuildSpec7();
	CTestChainBuild*  TestBuildSpec8();
	CTestChainBuild*  TestBuildSpec9();
	CTestChainBuild*  TestBuildSpec10();
	CTestChainBuild*  TestBuildSpec11();
	CTestChainBuild*  TestBuildSpec12();

//chain validate tests
//Fortezza tests
	CTestChainValidate*  TestValidateSpec1();
	CTestChainValidate*  TestValidateSpec2();
	CTestChainValidate*  TestValidateSpec3();
	CTestChainValidate*  TestValidateSpec4();
	CTestChainValidate*  TestValidateSpec5();
	CTestChainValidate*  TestValidateSpec6();
	CTestChainValidate*  TestValidateSpec7();
	CTestChainValidate*  TestValidateSpec8();
	CTestChainValidate*  TestValidateSpec9();
	CTestChainValidate*  TestValidateSpec10();
	CTestChainValidate*  TestValidateSpec11();
	CTestChainValidate*  TestValidateSpec12();
	CTestChainValidate*  TestValidateSpec13();
	CTestChainValidate*  TestValidateSpec14();
	CTestChainValidate*  TestValidateSpec15();
	CTestChainValidate*  TestValidateSpec16();
	CTestChainValidate*  TestValidateSpec17();
//lloyds chain
	CTestChainValidate*  TestValidateSpec18();
//test case where only one self signed trusted cert is supplied
	CTestChainValidate*  TestValidateSpec19();
//test case where only one self signed untrusted cert is supplied
	CTestChainValidate*  TestValidateSpec20();
//test case where no certs are supplied (this one should leave)
	CTestChainValidate*  TestValidateSpec21();
//test case for chain using RSA+SHA1	
	CTestChainValidate*  TestValidateSpec22();
	CTestChainValidate*  TestValidateSpec23();
//FINEID test cases
	CTestChainValidate*  TestValidateSpec24();
	CTestChainValidate*  TestValidateSpec25();
	CTestChainValidate*  TestValidateSpec26();
	CTestChainValidate*  TestValidateSpec27();
//test warning generated when root cert not self signed
	CTestChainValidate*  TestValidateSpec28();
//test case with Apache default certs
	CTestChainValidate*  TestValidateSpec29();
	CTestChainValidate*  TestValidateSpec30();
//policy processing tests
	CTestChainValidate*  TestValidateSpec31();
	CTestChainValidate*  TestValidateSpec32();
	CTestChainValidate*  TestValidateSpec33();
	CTestChainValidate*  TestValidateSpec34();
	CTestChainValidate*  TestValidateSpec35();
	};