/* Copyright (c) 2000 - 2013 Samsung Electronics Co., Ltd All Rights Reserved
 *
 *  Licensed under the Apache License, Version 2.0 (the "License");
 *  you may not use this file except in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License
 *
 *
 * @file        client-manager-impl.h
 * @author      Bartlomiej Grzelewski (b.grzelewski@samsung.com)
 * @version     1.0
 * @brief       Manager implementation.
 */
#pragma once

#include <protocols.h>

#include <ckm/ckm-type.h>
#include <ckm/ckm-key.h>
#include <ckm/ckm-manager.h>

namespace CKM {

class ManagerImpl : public Manager {
public:
    ManagerImpl();
    virtual ~ManagerImpl(){}

    int saveKey(const Alias &alias, const KeyShPtr &key, const Policy &policy);
    int removeKey(const Alias &alias);
    int getKey(const Alias &alias, const Password &password, KeyShPtr &key);
    int getKeyAliasVector(AliasVector &aliasVector);

    int saveCertificate(const Alias &alias, const CertificateShPtr &cert, const Policy &policy);
    int removeCertificate(const Alias &alias);
    int getCertificate(const Alias &alias, const Password &password, CertificateShPtr &cert);
    int getCertificateAliasVector(AliasVector &aliasVector);

    int saveData(const Alias &alias, const RawBuffer &rawData, const Policy &policy);
    int removeData(const Alias &alias);
    int getData(const Alias &alias, const Password &password, RawBuffer &cert);
    int getDataAliasVector(AliasVector &aliasVector);

    int createKeyPairRSA(
        const int size,              // size in bits [1024, 2048, 4096]
        const Alias &privateKeyAlias,
        const Alias &publicKeyAlias,
        const Policy &policyPrivateKey = Policy(),
        const Policy &policyPublicKey = Policy());

    int createKeyPairDSA(
        const int size,              // size in bits [1024, 2048, 3072, 4096]
        const Alias &privateKeyAlias,
        const Alias &publicKeyAlias,
        const Policy &policyPrivateKey = Policy(),
        const Policy &policyPublicKey = Policy());

    int createKeyPairECDSA(
        ElipticCurve type,
        const Alias &privateKeyAlias,
        const Alias &publicKeyAlias,
        const Policy &policyPrivateKey = Policy(),
        const Policy &policyPublicKey = Policy());

    int getCertificateChain(
        const CertificateShPtr &certificate,
        const CertificateShPtrVector &untrustedCertificates,
        CertificateShPtrVector &certificateChainVector);

    int getCertificateChain(
        const CertificateShPtr &certificate,
        const AliasVector &untrustedCertificates,
        CertificateShPtrVector &certificateChainVector);

    int createSignature(
        const Alias &privateKeyAlias,
        const Password &password,           // password for private_key
        const RawBuffer &message,
        const HashAlgorithm hash,
        const RSAPaddingAlgorithm padding,
        RawBuffer &signature);

    int verifySignature(
        const Alias &publicKeyOrCertAlias,
        const Password &password,           // password for public_key (optional)
        const RawBuffer &message,
        const RawBuffer &signature,
        const HashAlgorithm hash,
        const RSAPaddingAlgorithm padding);

    int ocspCheck(const CertificateShPtrVector &certificateChain, int &ocspCheck);

    int allowAccess(const std::string &alias, const std::string &accessor, AccessRight granted);
    int denyAccess(const std::string &alias, const std::string &accessor);

protected:
    int saveBinaryData(
        const Alias &alias,
        DBDataType dataType,
        const RawBuffer &rawData,
        const Policy &policy);

    int removeBinaryData(
        const Alias &alias,
        DBDataType dataType);

    int getBinaryData(
        const Alias &alias,
        DBDataType sendDataType,
        const Password &password,
        DBDataType &recvDataType,
        RawBuffer &rawData);

    int getBinaryDataAliasVector(
        DBDataType sendDataType,
        AliasVector &aliasVector);

    int createKeyPair(
        const KeyType key_type,
        const int     additional_param, // key size for [RSA|DSA], elliptic curve type for ECDSA
        const Alias  &privateKeyAlias,
        const Alias  &publicKeyAlias,
        const Policy &policyPrivateKey,
        const Policy &policyPublicKey);

    int m_counter;
    static bool s_isInit;
};

} // namespace CKM