/* ====================================================================
 * Copyright (c) 2016 The GmSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the GmSSL Project.
 *    (http://gmssl.org/)"
 *
 * 4. The name "GmSSL Project" must not be used to endorse or promote
 *    products derived from this software without prior written
 *    permission. For written permission, please contact
 *    guanzhi1980@gmail.com.
 *
 * 5. Products derived from this software may not be called "GmSSL"
 *    nor may "GmSSL" appear in their names without prior written
 *    permission of the GmSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the GmSSL Project
 *    (http://gmssl.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 * ====================================================================
 */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <openssl/err.h>
#include <openssl/gmsaf.h>
#include <openssl/gmsof.h>
#include <openssl/crypto.h>
#include "../../e_os.h"

static SOF_LONG sof_sign_method = SGD_SM2;
static SOF_LONG sof_enc_method = SGD_SM4_CBC;
static SOF_LONG sof_last_error = SOR_OK;
static void *sof_app = NULL;
static int sof_user_type = SGD_ROLE_USER;

static int sof_read_file(const char *path, unsigned char **pdata,
	unsigned int *pdatalen)
{
	return 0;
}

static char *sof_encode(const unsigned char *bin, unsigned int binlen)
{
	return NULL;
}

#if 0
static int sof_decode(const char *b64, unsigned char **pdata, unsigned int *pdatalen)
{
	return 0;
}
#endif

SOF_BSTR SOF_GetVersion(void)
{
	return OPENSSL_strdup(OpenSSL_version(0));
}

SOF_LONG SOF_SetSignMethod(SOF_LONG SignMethod)
{
	sof_sign_method = SignMethod;
	return SOR_OK;
}

SOF_LONG SOF_GetSignMethod(void)
{
	return sof_sign_method;
}

SOF_LONG SOF_SetEncryptMethod(SOF_LONG EncryptMethod)
{
	sof_enc_method = EncryptMethod;
	return SOR_OK;
}

SOF_LONG SOF_GetEncryptMethod(void)
{
	return sof_enc_method;
}

/* list installed client's certificates */
SOF_BSTR SOF_GetUserList(void)
{
	SOFerr(SOF_F_SOF_GETUSERLIST, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

/* we need an reference to engine */
SOF_BSTR SOF_ExportUserCert(SOF_BSTR ContainerName)
{
	SOFerr(SOF_F_SOF_EXPORTUSERCERT, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BOOL SOF_Login(SOF_BSTR ContainerName, SOF_BSTR PassWd)
{
	unsigned int uiRemainCount;
	int rv;

	if ((rv = SAF_Login(
		sof_app,
		sof_user_type,
		(unsigned char *)ContainerName,
		(unsigned int)strlen(ContainerName),
		(unsigned char *)PassWd,
		(unsigned int)strlen(PassWd),
		&uiRemainCount)) != SAR_Ok) {
		SOFerr(SOF_F_SOF_LOGIN, ERR_R_SAF_LIB);
		return SGD_FALSE;
	}

	return SGD_TRUE;
}

SOF_LONG SOF_GetPinRetryCount(SOF_BSTR ContainerName)
{
	SOFerr(SOF_F_SOF_GETPINRETRYCOUNT, SOF_R_NOT_IMPLEMENTED);
	return SOR_NotSupportYetErr;
}

SOF_BOOL SOF_ChangePassWd(SOF_BSTR ContainerName, SOF_BSTR OldPassWd, SOF_BSTR NewPassWd)
{
	int rv;
	unsigned int uiRemainCount;

	if ((rv = SAF_ChangePin(
		sof_app,
		sof_user_type,
		(unsigned char *)ContainerName,
		(unsigned int)strlen(ContainerName),
		(unsigned char *)OldPassWd,
		(unsigned int)strlen(OldPassWd),
		(unsigned char *)NewPassWd,
		(unsigned int)strlen(NewPassWd),
		&uiRemainCount)) != SAR_Ok) {
		SOFerr(SOF_F_SOF_CHANGEPASSWD, ERR_R_SAF_LIB);
		return SGD_FALSE;
	}

	return SGD_TRUE;
}

SOF_BSTR SOF_ExportExchangeUserCert(SOF_BSTR ContainerName)
{
	SOFerr(SOF_F_SOF_EXPORTEXCHANGEUSERCERT, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

/* `type` defined as SGD_CERT_XXX, SGD_EXT_XXX in sgd.h */
SOF_BSTR SOF_GetCertInfo(SOF_BSTR Base64EncodeCert, SOF_SHORT Type)
{
	char *ret = NULL;

	switch (Type) {
	case SGD_CERT_VERSION:
	case SGD_CERT_SERIAL:
	case SGD_CERT_ISSUER:
	case SGD_CERT_VALID_TIME:
	case SGD_CERT_SUBJECT:
	case SGD_CERT_DER_PUBLIC_KEY:
	case SGD_CERT_DER_EXTENSIONS:
	case SGD_EXT_AUTHORITYKEYIDENTIFIER_INFO:
	case SGD_EXT_SUBJECTKEYIDENTIFIER_INFO:
	case SGD_EXT_KEYUSAGE_INFO:
	case SGD_EXT_PRIVATEKEYUSAGEPERIOD_INFO:
	case SGD_EXT_CERTIFICATEPOLICIES_INFO:
	case SGD_EXT_POLICYMAPPINGS_INFO:
	case SGD_EXT_BASICCONSTRAINTS_INFO:
	case SGD_EXT_POLICYCONSTRAINTS_INFO:
	case SGD_EXT_EXTKEYUSAGE_INFO:
	case SGD_EXT_CRLDISTRIBUTIONPOINTS_INFO:
	case SGD_EXT_NETSCAPE_CERT_TYPE_INFO:
	case SGD_EXT_SELFDEFINED_EXTENSION_INFO:
	case SGD_CERT_ISSUER_CN:
	case SGD_CERT_ISSUER_O:
	case SGD_CERT_ISSUER_OU:
	case SGD_CERT_SUBJECT_CN:
	case SGD_CERT_SUBJECT_O:
	case SGD_CERT_SUBJECT_OU:
	case SGD_CERT_SUBJECT_EMAIL:
	case SGD_CERT_NOTBEFORE_TIME:
	case SGD_CERT_NOTAFTER_TIME:
		SOFerr(SOF_F_SOF_GETCERTINFO, SOF_R_NOT_IMPLEMENTED);
		goto end;
	default:
		SOFerr(SOF_F_SOF_GETCERTINFO, SOF_R_INVALID_CERT_ATTRIBUTE);
		goto end;
	}

end:
	SOFerr(SOF_F_SOF_GETCERTINFO, SOF_R_NOT_IMPLEMENTED);
	return ret;
}

SOF_BSTR SOF_GetCertInfoByOid(SOF_BSTR Base64EncodeCert, SOF_BSTR Oid)
{
	SOFerr(SOF_F_SOF_GETCERTINFOBYOID, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BSTR SOF_GetDeviceInfo(SOF_BSTR ContainerName, SOF_LONG Type)
{
	SOFerr(SOF_F_SOF_GETDEVICEINFO, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_LONG SOF_ValidateCert(SOF_BSTR Base64EncodeCert)
{
	SOFerr(SOF_F_SOF_VALIDATECERT, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_SignData(SOF_BSTR ContainerName, SOF_BSTR InData)
{
	char *ret = NULL;
	char *b64 = NULL;
	unsigned int uiHashAlgoType = SGD_SM3;
	unsigned char *pucInData = NULL;
	unsigned int uiInDataLen = strlen(InData) + 128;
	unsigned char pucSignature[256];
	unsigned int uiSignatureLen = (unsigned int)sizeof(pucSignature);
	int rv;

	if (!(pucInData = OPENSSL_malloc(uiInDataLen))) {
		SOFerr(SOF_F_SOF_SIGNDATA, ERR_R_MALLOC_FAILURE);
		goto end;
	}

	if (SAF_Base64_Decode((unsigned char *)InData, (unsigned int)strlen(InData),
		pucInData, &uiInDataLen) != SOR_OK) {
		SOFerr(SOF_F_SOF_SIGNDATA, SOF_R_DECODE_FAILURE);
		goto end;
	}

	if (SOF_GetSignMethod() == SGD_SM2) {
		if ((rv = SAF_RsaSign(
			sof_app,
			(unsigned char *)ContainerName,
			(unsigned int)strlen(ContainerName),
			uiHashAlgoType,
			pucInData,
			uiInDataLen,
			pucSignature,
			&uiSignatureLen)) != SAR_Ok) {
			SOFerr(SOF_F_SOF_SIGNDATA, ERR_R_SAF_LIB);
			goto end;
		}
	} else {
		if ((rv = SAF_EccSign(
			sof_app,
			(unsigned char *)ContainerName,
			(unsigned int)strlen(ContainerName),
			uiHashAlgoType,
			pucInData,
			uiInDataLen,
			pucSignature,
			&uiSignatureLen)) != SAR_Ok) {
			SOFerr(SOF_F_SOF_SIGNDATA, ERR_R_SAF_LIB);
			goto end;
		}
	}

	ret = SOR_OK;
end:
	OPENSSL_free(b64);
	OPENSSL_free(pucInData);
	return ret;
}

SOF_BOOL SOF_VerifySignedData(SOF_BSTR Base64EncodeCert, SOF_BSTR InData, SOF_BSTR SignValue)
{
	SOFerr(SOF_F_SOF_VERIFYSIGNEDDATA, SOF_R_NOT_IMPLEMENTED);
	return 0;
}


SOF_BSTR SOF_SignFile(SOF_BSTR ContainerName, SOF_BSTR InFile)
{
	SOF_BSTR ret = NULL;
	char *b64 = NULL;
	unsigned int uiHashAlgoType = SGD_SM3;
	unsigned char *pucInData = NULL;
	unsigned int uiInDataLen;
	unsigned char pucSignature[256];
	unsigned int uiSignatureLen = (unsigned int)sizeof(pucSignature);
	int rv;

	if (!sof_read_file(InFile, &pucInData, &uiInDataLen)) {
		SOFerr(SOF_F_SOF_SIGNFILE, SOF_R_READ_FILE_FAILURE);
		return NULL;
	}

	if ((rv = SAF_EccSign(
		sof_app,
		(unsigned char *)ContainerName,
		(unsigned int)strlen(ContainerName),
		uiHashAlgoType,
		pucInData,
		uiInDataLen,
		pucSignature,
		&uiSignatureLen)) != SAR_Ok) {
		SOFerr(SOF_F_SOF_SIGNFILE, ERR_R_SAF_LIB);
		goto end;
	}

	if (!(b64 = sof_encode(pucSignature, uiSignatureLen))) {
		SOFerr(SOF_F_SOF_SIGNFILE, ERR_R_SOF_LIB);
		goto end;
	}

	ret = b64;
	b64 = NULL;

end:
	OPENSSL_free(b64);
	OPENSSL_free(pucInData);
	return ret;
}

SOF_BOOL SOF_VerifySignedFile(SOF_BSTR Base64EncodeCert, SOF_BSTR InFile, SOF_BSTR SignValue)
{
	return SGD_FALSE;
}

SOF_BSTR SOF_EncryptData(SOF_BSTR Base64EncodeCert, SOF_BSTR InData)
{
#if 0
	char *ret = NULL;
	unsigned char *pucCertificate = NULL;
	unsigned int uiCertificateLen;
	unsigned char *pucInData = NULL;
	unsigned int uiInDataLen;
	int rv;

	if (SOF_Decode(Base64EncodeCert, &pucCertificate, &uiCertificateLen) != SOR_OK
		|| SOF_Decode(InData, &pucInData, &uiInDataLen) != SOR_OK
		|| (rv = SAF_EccPublicKeyEncByCert(
			pucCertificate,
			uiCertificateLen,
			uiAlgorithmID,
			pucInData,
			uiInDataLen,
			pucOutData,
			puiOutDataLen)) != SAR_Ok) {
	}
#endif
	return NULL;
}

SOF_BSTR SOF_DecryptData(SOF_BSTR ContainerName, SOF_BSTR InData)
{
	SOFerr(SOF_F_SOF_DECRYPTDATA, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BOOL SOF_EncryptFile(SOF_BSTR Base64EncodeCert, SOF_BSTR InFile, SOF_BSTR OutFile)
{
	int ret = SGD_FALSE;
#if 0
	unsigned char *pucCertificate = NULL;
	unsigned int uiCertificateLen;
	int rv;

	if (SOF_Decode(Base64EncodeCert, &pucCertificate, &uiCertificateLen) != SOR_OK) {
		SOFerr(SOF_F_SOF_ENCRYPTFILE, SOF_R_DECODE_FAILURE);
		goto end;
	}

	if ((rv = SAF_EccPublicKeyEncByCert(
		pucCertificate,
		uiCertificateLen,
		uiAlgorithmID,
		pucInData,
		uiInDataLen,
		pucOutData,
		puiOutDataLen)) != SAR_Ok) {
		SOFerr(SOF_F_SOF_ENCRYPTFILE, ERR_R_SAF_LIB);
		goto end;
	}

	ret = SGD_TRUE;

end:
	OPENSSL_free(pucCertificate);
#endif
	return ret;
}

SOF_BOOL SOF_DecryptFile(SOF_BSTR ContainerName, SOF_BSTR InFile, SOF_BSTR OutFile)
{
	int ret = SGD_FALSE;
	return ret;
}

SOF_BSTR SOF_SignMessage(SOF_SHORT flag, SOF_BSTR ContainerName, SOF_BSTR InData)
{
	SOFerr(SOF_F_SOF_SIGNMESSAGE, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BOOL SOF_VerifySignedMessage(SOF_BSTR MessageData, SOF_BSTR InData)
{
	SOFerr(SOF_F_SOF_VERIFYSIGNEDMESSAGE, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_GetInfoFromSignedMessage(SOF_BSTR SignedMessage, SOF_SHORT Type)
{
	SOFerr(SOF_F_SOF_GETINFOFROMSIGNEDMESSAGE, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BSTR SOF_SignDataXML(SOF_BSTR ContainerName, SOF_BSTR InData)
{
	return NULL;
}

SOF_BOOL SOF_VerifySignedDataXML(SOF_BSTR InData)
{
	SOFerr(SOF_F_SOF_VERIFYSIGNEDDATAXML, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_GetXMLSignatureInfo(SOF_BSTR XMLSignedData, SOF_SHORT Type)
{
	SOFerr(SOF_F_SOF_GETXMLSIGNATUREINFO, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BSTR SOF_GenRandom(SOF_SHORT RandomLen)
{
	char *ret = NULL;
	char *b64 = NULL;
	unsigned char *bin = NULL;
	int rv;

	if (!(bin = OPENSSL_malloc(RandomLen))
		|| (rv = SAF_GenRandom(RandomLen, bin)) != SAR_Ok
		|| !(b64 = sof_encode(bin, RandomLen))) {
		SOFerr(SOF_F_SOF_GENRANDOM, ERR_R_SOF_LIB);
		goto end;
	}

end:
	OPENSSL_free(bin);
	OPENSSL_free(b64);
	return ret;
}

SOF_LONG SOF_GetLastError(void)
{
	return sof_last_error;
}

SOF_LONG SOF_SetCertTrustList(SOF_BSTR CTLAltName, SOF_BSTR CTLContent, SOF_SHORT CTLContentLen)
{
	SOFerr(SOF_F_SOF_SETCERTTRUSTLIST, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_GetCertTrustListAltNames(void)
{
	SOFerr(SOF_F_SOF_GETCERTTRUSTLISTALTNAMES, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BSTR SOF_GetCertTrustList(SOF_BSTR CTLAltName)
{
	SOFerr(SOF_F_SOF_GETCERTTRUSTLIST, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_LONG SOF_DelCertTrustList(SOF_BSTR CTLAltName)
{
	SOFerr(SOF_F_SOF_DELCERTTRUSTLIST, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_LONG SOF_InitCertAppPolicy(SOF_BSTR PolicyName)
{
	SOFerr(SOF_F_SOF_INITCERTAPPPOLICY, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_GetServerCertificate(SOF_SHORT CertUsage)
{
	SOFerr(SOF_F_SOF_GETSERVERCERTIFICATE, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BSTR SOF_SignMessageDetach(SOF_BSTR InData)
{
	SOFerr(SOF_F_SOF_SIGNMESSAGEDETACH, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_LONG SOF_VerifySignedMessageDetach(SOF_BSTR InData, SOF_BSTR SignedMessage)
{
	SOFerr(SOF_F_SOF_VERIFYSIGNEDMESSAGEDETACH, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_CreateTimeStampRequest(SOF_BSTR InData)
{
	SOFerr(SOF_F_SOF_CREATETIMESTAMPREQUEST, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_BSTR SOF_CreateTimeStampResponse(SOF_BSTR TimeStampRequest)
{
	SOFerr(SOF_F_SOF_CREATETIMESTAMPRESPONSE, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

SOF_LONG SOF_VerifyTimeStamp(SOF_BSTR InData, SOF_BSTR tsResponseData)
{
	SOFerr(SOF_F_SOF_VERIFYTIMESTAMP, SOF_R_NOT_IMPLEMENTED);
	return 0;
}

SOF_BSTR SOF_GetTimeStampInfo(SOF_BSTR tsResponseData, SOF_SHORT type)
{
	SOFerr(SOF_F_SOF_GETTIMESTAMPINFO, SOF_R_NOT_IMPLEMENTED);
	return NULL;
}

static ERR_STRING_DATA sof_errstr[] = {
	{ SOR_OK,		"Success" },
	{ SOR_UnknownErr,	"Unknown error" },
	{ SOR_FileErr,		"File error" },
	{ SOR_ProviderTypeErr,	"Provider type error" },
	{ SOR_LoadProviderErr,	"Load provider error" },
};

const char *SOF_GetErrorString(int err)
{
	int i;
	for (i = 0; i < OSSL_NELEM(sof_errstr); i++) {
		if (err == sof_errstr[i].error) {
			return sof_errstr[i].string;
		}
	}
	return "(undef)";
}