sl@0: /*
sl@0: Copyright (c) 2009-2010 Nokia Corporation and/or its subsidiary(-ies). All rights reserved.
sl@0: 
sl@0: Redistribution and use in source and binary forms, with or without 
sl@0: modification, are permitted provided that the following conditions are met:
sl@0: 
sl@0: * Redistributions of source code must retain the above copyright notice, this 
sl@0:   list of conditions and the following disclaimer.
sl@0: * Redistributions in binary form must reproduce the above copyright notice, 
sl@0:   this list of conditions and the following disclaimer in the documentation 
sl@0:   and/or other materials provided with the distribution.
sl@0: * Neither the name of Nokia Corporation nor the names of its contributors 
sl@0:   may be used to endorse or promote products derived from this software 
sl@0:   without specific prior written permission.
sl@0: 
sl@0: THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" 
sl@0: AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
sl@0: IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 
sl@0: DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE 
sl@0: FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
sl@0: DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 
sl@0: SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER 
sl@0: CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 
sl@0: OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 
sl@0: OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
sl@0: 
sl@0: Description:  Contains implementation for x509_add_symbian_cert - to use certificates installed in Symbian with OpenSSL code.
sl@0: */
sl@0: 
sl@0:  
sl@0: #include "certretriever.h"
sl@0: #include "createx509.h"
sl@0: 
sl@0: #include <securitydefsconst.h>
sl@0: 
sl@0: #ifdef __cplusplus
sl@0: extern "C" 
sl@0: {
sl@0: #endif
sl@0: int X509_add_symbian_certsL(X509_STORE * store)
sl@0: {
sl@0: 	CActiveScheduler* activeScheduler;
sl@0: 	CActiveScheduler* CurrentActiveScheduler = CActiveScheduler::Current();
sl@0: 	if(CurrentActiveScheduler == NULL)
sl@0: 	{
sl@0: 		activeScheduler = new (ELeave) CActiveScheduler;
sl@0: 		CleanupStack::PushL(activeScheduler);
sl@0: 		
sl@0: 		CActiveScheduler::Install(activeScheduler);
sl@0: 	}
sl@0: 	
sl@0: 		
sl@0: 	TRequestStatus status;
sl@0: 	CCertRetriever* certRetriever;
sl@0: 	TRAPD(error, certRetriever = CCertRetriever::NewL(store, status, CActiveScheduler::Current()));
sl@0: 	
sl@0: 	// create CActiveSchedulerWait
sl@0: 	if (CurrentActiveScheduler)
sl@0: 	{
sl@0: 		certRetriever->activeSchedulerwait = new (ELeave) CActiveSchedulerWait; 
sl@0: 		certRetriever->OwnScheduler = EFalse;	
sl@0: 	}
sl@0: 	
sl@0: 	
sl@0: 	if(error != KErrNone)
sl@0: 	{
sl@0: 		CleanupStack::PopAndDestroy();	// activeScheduler
sl@0: 		return 0;
sl@0: 	}
sl@0: 	
sl@0: 	CleanupStack::PushL(certRetriever);	
sl@0: 	
sl@0: 	TRAP(error,certRetriever->RetriveCertificateL());
sl@0: 	if(error != KErrNone)
sl@0: 	{
sl@0: 		if(CurrentActiveScheduler == NULL)
sl@0: 		{
sl@0: 			CleanupStack::PopAndDestroy(2);	// activeScheduler, certRetriever
sl@0: 		}
sl@0: 		else
sl@0: 			CleanupStack::PopAndDestroy();	// certRetriever
sl@0: 		return 0;
sl@0: 	}
sl@0: 		
sl@0: 				
sl@0: 	if(CurrentActiveScheduler == NULL)
sl@0: 	{
sl@0: 		activeScheduler->Start();
sl@0: 		 CleanupStack::PopAndDestroy(2); // If you destroy the object it will not be there
sl@0: 										   // in the iActiveQ, and hence stray signal.
sl@0: 		
sl@0: 		//CleanupStack::Pop(2);	   // So just pop it. // activeScheduler, certRetriever						   
sl@0: 	}
sl@0: 	else
sl@0: 	{
sl@0: 	//	CurrentActiveScheduler->Start();// If you are using CActiveScheduler::Current();
sl@0: 										  // Why u want to start it again?	
sl@0:         
sl@0:         // CleanupStack::PopAndDestroy(); // If you destroy the object it will not be there
sl@0: 										  // in the iActiveQ, and hence stray signal.	
sl@0: 										  									   
sl@0: 		// should wait here untill it finish loading certificates, ths API is synchronous
sl@0: 		certRetriever->activeSchedulerwait->Start();
sl@0: 		   
sl@0: 		CleanupStack::Pop(); 		  // So just pop it. // certRetriever
sl@0: 	}
sl@0: 	
sl@0: 	
sl@0: 		
sl@0: 	if(status == KErrNone)
sl@0: 		return 1;
sl@0: 	else
sl@0: 		return 0;
sl@0: }
sl@0: #ifdef __cplusplus
sl@0: }
sl@0: #endif
sl@0: 
sl@0: CCertRetriever::CCertRetriever(X509_STORE* aStore, 
sl@0: 				TRequestStatus& aStatus,
sl@0: 				const CActiveScheduler* aActiveScheduler)
sl@0: 			: CActive(CActive::EPriorityHigh), 
sl@0: 			  iStore(aStore),
sl@0: 			  iFinStatus ( aStatus ),
sl@0: 			  iActiveScheduler(aActiveScheduler),
sl@0: 			  iCertPtr(0,0)			  
sl@0: 			  
sl@0: 	{
sl@0: 	
sl@0: 	OwnScheduler = ETrue;
sl@0: 	if(iActiveScheduler)
sl@0: 		iActiveScheduler->Add(this);
sl@0: 	}
sl@0: 
sl@0: CCertRetriever::~CCertRetriever()
sl@0: 	{
sl@0: 		Cancel();
sl@0:  		delete iBuf;
sl@0:  		delete iCertFilter;
sl@0:  		
sl@0:  	 	iCerts.Close();	
sl@0:  		delete iCertStore;
sl@0:  		iFs.Close();
sl@0:  		if(!OwnScheduler)
sl@0:  		  delete activeSchedulerwait;
sl@0:  	}
sl@0: 	
sl@0: CCertRetriever* CCertRetriever::NewLC(X509_STORE* aStore,
sl@0: 						TRequestStatus& aStatus, 
sl@0: 						const CActiveScheduler* aActiveScheduler)
sl@0: 	{
sl@0: 	CCertRetriever* self = new (ELeave) CCertRetriever(aStore, aStatus, aActiveScheduler);
sl@0: 	CleanupStack::PushL(self);
sl@0: 	TRAPD(err,self->ConstructL());
sl@0: 	if(err != KErrNotFound)
sl@0: 		return self;
sl@0: 	
sl@0: 	CleanupStack::PopAndDestroy(self);	
sl@0: 	return NULL;
sl@0: 	}
sl@0: 
sl@0: CCertRetriever* CCertRetriever::NewL(X509_STORE* aStore,
sl@0: 						TRequestStatus& aStatus, 
sl@0: 						const CActiveScheduler* aActiveScheduler)
sl@0: 	{
sl@0: 	CCertRetriever* self = CCertRetriever::NewLC(aStore, aStatus, aActiveScheduler);
sl@0: 	if(self)
sl@0: 		CleanupStack::Pop();
sl@0: 	return self;
sl@0: 	}
sl@0: 
sl@0: void CCertRetriever::ConstructL()
sl@0: 	{
sl@0: 		TInt err = iFs.Connect();
sl@0: 		if(err != KErrNone)
sl@0: 			User::Leave(err);
sl@0: 		
sl@0:  		iState = EInitializeCertStore;
sl@0:  		iBuf = HBufC8::NewL(KMaxCertLength);
sl@0: 	}
sl@0: 
sl@0: 
sl@0: void CCertRetriever::RunL()
sl@0: 	{
sl@0: 	// 1. All certificates retrieved.
sl@0: 	// 2. yes. check iActiveScheduler. if null then call User::RequestComplete(iStatus) else iActiveScheduler->Stop();
sl@0: 	User::LeaveIfError(iStatus.Int());
sl@0: 		
sl@0: 		switch(iState)
sl@0: 		{
sl@0: 		case EInitializeCertStore:
sl@0: 					OpenUnifiedCertStoreL();		
sl@0: 					break;
sl@0: 		
sl@0: 		case EListCerts:
sl@0: 					ListCertsL();	
sl@0: 					break;
sl@0: 		case EAppendCerts:
sl@0: 					if (!iCerts.Count()) // no certificate in store.
sl@0: 					{
sl@0: 						iState = ENoCerts;												
sl@0: 					}
sl@0: 					else
sl@0: 					{
sl@0: 						AppendCertsL();
sl@0: 						break;	
sl@0: 					}			
sl@0: 		       		
sl@0: 		case EDone:
sl@0: 					if (iState != ENoCerts)
sl@0: 					{
sl@0: 						ProcessCertsL();	//Process the last certificate
sl@0: 						iCertCount = 0;	
sl@0: 					}					
sl@0: 		case ENoCerts:
sl@0: 								
sl@0: 					if(iActiveScheduler)
sl@0: 					{
sl@0: 						if(OwnScheduler)
sl@0: 							iActiveScheduler->Stop();
sl@0: 						else
sl@0: 							activeSchedulerwait->AsyncStop();
sl@0: 						
sl@0: 						iFinStatus = iStatus;
sl@0: 					}
sl@0: 					else
sl@0: 					{
sl@0: 						TRequestStatus *s = &iFinStatus;
sl@0: 						User::RequestComplete(s, KErrNone);	
sl@0: 					}
sl@0: 					
sl@0: 					
sl@0: 					break;
sl@0: 		
sl@0: 		default:
sl@0: 				User::Leave(KErrNotFound);
sl@0: 				break;
sl@0: 		}
sl@0: 	}
sl@0: 
sl@0: 
sl@0: void CCertRetriever::DoCancel()
sl@0: 	{
sl@0: 	}
sl@0: 
sl@0: TInt CCertRetriever::RunError(TInt aError)
sl@0: 	{
sl@0: 		//Can do some error handling here
sl@0: 		if(iActiveScheduler)
sl@0: 		{
sl@0: 			iActiveScheduler->Stop();
sl@0: 			iFinStatus = iStatus;
sl@0: 		}
sl@0: 		else
sl@0: 		{
sl@0: 			TRequestStatus *s = &iFinStatus;
sl@0: 			User::RequestComplete(s, aError);	
sl@0: 		}
sl@0: 		
sl@0: 		return KErrNone; 
sl@0: 	}
sl@0: 
sl@0: void CCertRetriever::RetriveCertificateL()
sl@0: 	{
sl@0: 		OpenUnifiedCertStoreL();
sl@0: 	}
sl@0: 	
sl@0: 	
sl@0: void CCertRetriever::OpenUnifiedCertStoreL()
sl@0:     {
sl@0:     
sl@0:     	iState = EListCerts;
sl@0:     	delete iCertStore;
sl@0:     	iCertStore = NULL;
sl@0:     	iCertStore = CUnifiedCertStore::NewL(iFs, EFalse);
sl@0:     	iCertStore->Initialize(iStatus);
sl@0:     	SetActive();
sl@0:     }
sl@0:     
sl@0: void CCertRetriever::ListCertsL()
sl@0: {
sl@0:     // Create filter object
sl@0:    
sl@0:    delete iCertFilter;
sl@0:    iCertFilter = NULL;
sl@0:    iCertFilter = CCertAttributeFilter::NewL();    
sl@0:    iCertFilter->SetFormat(EX509Certificate);
sl@0:    iCertFilter->SetOwnerType(ECACertificate);
sl@0:    iCertFilter->SetUid(KTlsApplicabilityUid);
sl@0: 
sl@0:     iStatus = KRequestPending;
sl@0:     SetActive();
sl@0:     iCertStore->List(iCerts, *iCertFilter, iStatus);
sl@0:     iState = EAppendCerts;
sl@0: }
sl@0: 
sl@0: void CCertRetriever::AppendCertsL()
sl@0: {
sl@0: 	if(iCertCount>0)	
sl@0: 		ProcessCertsL();
sl@0: 	
sl@0: 	CCTCertInfo *cert = iCerts[iCertCount];
sl@0: 		
sl@0: 	SetActive();			
sl@0: 	iStatus == KRequestPending;
sl@0: 		
sl@0: 	iCertPtr.Set( iBuf->Des() );
sl@0:     iCertStore->Retrieve((*cert),iCertPtr,iStatus);
sl@0: 	
sl@0: 	iCertCount++;
sl@0: 	
sl@0: 		if(iCertCount == iCerts.Count())
sl@0: 			iState = EDone;	
sl@0: }
sl@0: 
sl@0: 
sl@0: void CCertRetriever::ProcessCertsL()
sl@0: {
sl@0: 	CX509Certificate *X509Cert;
sl@0: 	TRAPD(error, X509Cert = CX509Certificate::NewL( iCertPtr ));
sl@0: 	if(error !=KErrNone)
sl@0: 		return;
sl@0: 		
sl@0: 	CleanupStack::PushL(X509Cert);
sl@0: 
sl@0: 	X509* x509 = CX509_Initializer::CreateX509L(X509Cert);
sl@0: 
sl@0: 	if(x509)
sl@0: 	{
sl@0: 		X509_STORE_add_cert(iStore,x509);
sl@0: 		X509_free(x509);
sl@0: 	}
sl@0: 	
sl@0: 	CleanupStack::PopAndDestroy(); //X509Cert
sl@0: 	
sl@0: }