/* ***************************************************************** *
 * Copyright 1998 International Business Machines Corporation. All   *
 * Rights Reserved.                                                  *
 *                                                                   *
 * Please read this carefully.  Your use of this reference           *
 * implementation of certain of the IETF public-key infrastructure   *
 * specifications ("Software") indicates your acceptance of the      *
 * following.  If you do not agree to the following, do not install  *
 * or use any of the Software.                                       *
 *                                                                   *
 * Permission to use, reproduce, distribute and create derivative    *
 * works from the Software ("Software Derivative Works"), and to     *
 * distribute such Software Derivative Works is hereby granted to    *
 * you by International Business Machines Corporation ("IBM").  This *
 * permission includes a license under the patents of IBM that are   *
 * necessarily infringed by your use of the Software as provided by  *
 * IBM.                                                              *
 *                                                                   *
 * IBM licenses the Software to you on an "AS IS" basis, without     *
 * warranty of any kind.  IBM HEREBY EXPRESSLY DISCLAIMS ALL         *
 * WARRANTIES OR CONDITIONS, EITHER EXPRESS OR IMPLIED, INCLUDING,   *
 * BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF       *
 * MERCHANTABILITY, NON INFRINGEMENT AND FITNESS FOR A PARTICULAR    *
 * PURPOSE.  You are solely responsible for determining the          *
 * appropriateness of using this Software and assume all risks       *
 * associated with the use of this Software, including but not       *
 * limited to the risks of program errors, damage to or loss of      *
 * data, programs or equipment, and unavailability or interruption   *
 * of operations.                                                    *
 *                                                                   *
 * IBM WILL NOT BE LIABLE FOR ANY DIRECT DAMAGES OR FOR ANY SPECIAL, *
 * INCIDENTAL, OR  INDIRECT DAMAGES OR FOR ANY ECONOMIC              *
 * CONSEQUENTIAL DAMAGES (INCLUDING LOST PROFITS OR SAVINGS), EVEN   *
 * IF IBM HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.  IBM  *
 * will not be liable for the loss of, or damage to, your records or *
 * data, or any damages claimed by you based on a third party claim. *
 *                                                                   *
 * IBM wishes to obtain your feedback to assist in improving the     *
 * Software.  You grant IBM a world-wide, royalty-free right to use, *
 * copy, distribute, sublicense and prepare derivative works based   *
 * upon any feedback, including materials, error corrections,        *
 * Software Derivatives, enhancements, suggestions and the like that *
 * you provide to IBM relating to the Software (this does not        *
 * include products for which you charge a royalty and distribute to *
 * IBM under other terms and conditions).                            *
 *                                                                   *
 * You agree to distribute the Software and any Software Derivatives *
 * under a license agreement that: 1) is sufficient to notify all    *
 * licensees of the Software and Software Derivatives that IBM       *
 * assumes no liability for any claim that may arise regarding the   *
 * Software or Software Derivatives, and 2) that disclaims all       *
 * warranties, both express and implied, from IBM regarding the      *
 * Software and Software Derivatives.  (If you include this          *
 * Agreement with any distribution of the Software or Software       *
 * Derivatives you will have met this requirement.)  You agree that  *
 * you will not delete any copyright notices in the Software.        *
 *                                                                   *
 * This Agreement is the exclusive statement of your rights in the   *
 * Software as provided by IBM.   Except for the rights granted to   *
 * you in the second paragraph above, You are not granted any other  *
 * patent rights, including but not limited to the right to make     *
 * combinations of the Software with products that infringe IBM      *
 * patents. You agree to comply with all applicable laws and         *
 * regulations, including all export and import laws and regulation. *
 * This Agreement is governed by the laws of the State of New York.  *
 * This Agreement supersedes all other communications,               *
 * understandings or agreements we may have had prior to this        *
 * Agreement.                                                        *
 * ***************************************************************** */

//------------------------------------------------------------
// includes
//------------------------------------------------------------

#include "x509.h"
#include "functiontrace.h"
#include "pkixvalidator.h"


//------------------------------------------------------------
// method: validateCertificatePolicies
//------------------------------------------------------------

void 
pkix_validator::validateCertificatePolicies(pkix_certificate& subject)
{
   TPTRACE(jonahtp_trace_info, "void pkix_validator::validateCertificatePolicies(pkix_certificate&)");

   //------------------------------------------------------------
   // no direct validation to done on Certificate Policies extension;
   // e.g., no rules like "cannot be a null sequence" to check.
   // Policies will be validated when we enforce PolicyConstraints 
   // state information.  
   //------------------------------------------------------------

}


//------------------------------------------------------------
// method: enforcePolicyConstraintsState
//------------------------------------------------------------

void 
pkix_validator::enforcePolicyConstraintsState(pkix_certificate& subject)
{
   TPTRACE(jonahtp_trace_info, "void pkix_validator::enforcePolicyConstraintsState(pkix_certificate&)");

   bool isCertPoliciesPresent  = subject.isCertificatePoliciesPresent();
   bool isCertPoliciesCritical = subject.isCertificatePoliciesCritical(); 

   //------------------------------------------------------------
   // (d) Verify policy information is consistent with the
   //     user-constrained-policy-set
   // (1) if the explicit policy state variable is <= to i, a policy
   //     identifier in cert must be in user-constrained-policy-set.  
   //     (If user-constrained-policy-set is "any-policy", 
   //     no need to check since a match is guaranteed.)
   // (2) if the policy mapping state variable is <= i, the
   //     policy identifier may not be mapped
   //------------------------------------------------------------

   if ( _explicitPolicy <= chainPosition() && !_userPolicySet.isAnyPolicy() )
   {
      //------------------------------------------------------------
      // (1) subject certificate must contain certificate policies extension
      // (2) at least one policy must match initial policy set
      //------------------------------------------------------------

      if ( ! isCertPoliciesPresent )
         throw TPException(TP_EXPLICIT_PC_REQUIRES_CP_EXT);

      if ( ! _userPolicySet.intersects(subject.certificatePolicies()) )
         throw TPException(TP_EXPLICIT_PC_REQUIRES_CP_INTERSECT_INITIAL_POLICY_SET);

   }

   if ( _policyMappingInhibit <= chainPosition() )
   {
      //------------------------------------------------------------
      // No policy mapping is allowed
      //------------------------------------------------------------

      if ( subject.isPolicyMappingsPresent() )
         throw TPException(TP_INHIBIT_PM_DISALLOW);
   }

   //------------------------------------------------------------
   // (e) Verify policy information is consistent with the
   //     acceptable policy set (i.e., what X.509 calls the 
   //     authority-constrained-policy-set)
   // (1) if the certificate policies extensions is marked critical,
   //     the intersection of the policies extension and the 
   //     authority-constrained-policy-set must be non-null
   // (2) the acceptable policy set is assigned the resulting 
   //     intersection as its new value
   //------------------------------------------------------------

   if (isCertPoliciesPresent && isCertPoliciesCritical)
   {
      PolicyState intersection = _authPolicySet.intersection(subject.certificatePolicies());
      _authPolicySet = intersection;
   }

   //------------------------------------------------------------
   // (g) Verify that the intersection of the 
   //     authority-constrained-policy-set and 
   //     user-constrained-policy-set is non-null
   //------------------------------------------------------------

   if ( !_authPolicySet.intersects(_userPolicySet) )
      throw TPException(TP_ACPS_UCPS_NO_INTERSECTION);

}


//------------------------------------------------------------
// method: updatePolicyConstraintsState 
//------------------------------------------------------------

#define MYMIN(a,b) (a) < (b) ? (a) : (b)

void 
pkix_validator::updatePolicyConstraintsState(pkix_certificate& subject)
{      
   TPTRACE(jonahtp_trace_info, "void pkix_validator::updatePolicyConstraintsState(pkix_certificate&)");

   int status = 0;
   
   // can update only if current certificate has policy constraints

   if ( !subject.isPolicyConstraintsPresent() )
   {
      return;
   }

   PolicyConstraint& policyConstraints = subject.policyConstraints();

   // sanity check Policy Constraints extension is not malformed

   validatePolicyConstraints(policyConstraints);

   //------------------------------------------------------------
   // (l) if policy constraints extension is included in the 
   //     certificate, modify the explicit policy and policy 
   //     mapping state variables
   //------------------------------------------------------------
   
   long newValue;

   if ( policyConstraints.requireExplicitPolicy.is_present() )
   {
      if ((status = policyConstraints.requireExplicitPolicy.get_value(newValue)) != 0)
         throw TPASNException(status);
      newValue += chainPosition();
      _explicitPolicy = MYMIN(_explicitPolicy, newValue);
   }
   if ( policyConstraints.inhibitPolicyMapping.is_present() )
   {
      if ((status = policyConstraints.inhibitPolicyMapping.get_value(newValue)) != 0)
         throw TPASNException(status);
      newValue += chainPosition();
      _policyMappingInhibit = MYMIN(_policyMappingInhibit, newValue);
   }

}


//------------------------------------------------------------
// method: validatePolicyConstraints
//------------------------------------------------------------

void
pkix_validator::validatePolicyConstraints(PolicyConstraint& policyConstraints)
{
   TPTRACE(jonahtp_trace_info, "void pkix_validator::validatePolicyConstraints(PolicyConstraint&)");

   if (
         !policyConstraints.requireExplicitPolicy.is_present() && 
         !policyConstraints.inhibitPolicyMapping.is_present() 
      )
       throw TPException(TP_MALFORMED_POLICY_CONSTRAINTS_EXT);
}
