//

//  MYEncoder.m

//  MYCrypto

//

//  Created by Jens Alfke on 1/16/08.

//  Copyright 2008-2009 Jens Alfke. All rights reserved.

//

#import "MYEncoder.h"

#import "MYIdentity.h"

#import "MYCrypto_Private.h"

#import "Test.h"

#import "MYErrorUtils.h"

@implementation MYEncoder

- (id) init

{

    self = [super init];

    if (self != nil) {

        if( ! checksave(CMSEncoderCreate(&_encoder)) ) {

            [self release];

            return nil;

        }

    }

    return self;

}

- (void) dealloc

{

    if(_encoder) CFRelease(_encoder);

    [super dealloc];

}

- (BOOL) addSigner: (MYIdentity*)signer

{

    Assert(signer);

    return checksave( CMSEncoderAddSigners(_encoder, signer.identityRef) );

}

- (BOOL) addRecipient: (MYCertificate*)recipient

{

    Assert(recipient);

    return checksave( CMSEncoderAddRecipients(_encoder, recipient.certificateRef) );

}

- (BOOL) addSupportingCert: (MYCertificate*)supportingCert

{

    Assert(supportingCert);

    return checksave( CMSEncoderAddSupportingCerts(_encoder, supportingCert.certificateRef) );

}

- (BOOL) addTimestamp

{

    return checksave( CMSEncoderAddSignedAttributes(_encoder, kCMSAttrSigningTime) );

}

- (NSError*) error

{

    if( _error )

        return MYError(_error, NSOSStatusErrorDomain, 

                       @"%@", MYErrorName(NSOSStatusErrorDomain,_error));

    else

        return nil;

}

- (CMSCertificateChainMode) certificateChainMode

{

    CMSCertificateChainMode mode;

    if( CMSEncoderGetCertificateChainMode(_encoder, &mode) == noErr )

        return mode;

    else

        return -1;

}

- (void) setCertificateChainMode: (CMSCertificateChainMode)mode

{

    checksave( CMSEncoderSetCertificateChainMode(_encoder, mode) );

}

- (BOOL) hasDetachedContent

{

    Boolean detached;

    return CMSEncoderGetHasDetachedContent(_encoder, &detached)==noErr && detached;

}

- (void) setHasDetachedContent: (BOOL)detached

{

    checksave( CMSEncoderSetHasDetachedContent(_encoder, detached) );

}

- (NSData*) _dataFromFunction: (OSStatus (*)(CMSEncoderRef,CFDataRef*))function

{

    CFDataRef data=NULL;

    if( checksave( (*function)(_encoder, &data) ) )

        return [(NSData*)CFMakeCollectable(data) autorelease];

    else

        return nil;

}

- (CSSM_OID) contentType

{

   NSData *data = [self _dataFromFunction: &CMSEncoderCopyEncapsulatedContentType];

   return (CSSM_OID){data.length,(uint8*)data.bytes};

}

- (void) setContentType: (CSSM_OID)contentType

{

    checksave( CMSEncoderSetEncapsulatedContentType(_encoder, &contentType) );

}

- (BOOL) addData: (NSData*)data

{

    Assert(data);

    return ! _error && checksave( CMSEncoderUpdateContent(_encoder, data.bytes, data.length) );

}

- (NSData*) encodedData

{

    if( ! _error )

        return [self _dataFromFunction: &CMSEncoderCopyEncodedContent];

    else

        return nil;

}

+ (NSData*) encodeData: (NSData*)data

                signer: (MYIdentity*)signer

             recipient: (MYCertificate*)recipient

                 error: (NSError**)outError

{

    MYEncoder *e = [[self alloc] init];

    if( signer )

        [e addSigner: signer];

    if( recipient )

        [e addRecipient: recipient];

    [e addData: data];

    *outError = e.error;

    NSData *result = e.encodedData;

    [e release];

    return result;

}

@end

#if DEBUG

#import "MYCrypto+Cocoa.h"

TestCase(MYEncoder) {

    MYIdentity *me = nil;//[MYIdentity preferredIdentityForName: @"MYCryptoTest"];

    if (!me) {

        NSArray *idents = [[[MYKeychain allKeychains] enumerateIdentities] allObjects];

        SFChooseIdentityPanel *panel = [SFChooseIdentityPanel sharedChooseIdentityPanel];

        [panel setAlternateButtonTitle: @"Cancel"];

        if ([panel my_runModalForIdentities: idents 

                                    message: @"Choose an identity for the MYEncoder test case:"]

                != NSOKButton) {

            [NSException raise: NSGenericException format: @"User canceled"];

        }

        me = [panel my_identity];

        [me makePreferredIdentityForName: @"MYCryptoTest"];

    }

    CAssert(me,@"No default identity has been set up in the Keychain");

    NSData *source = [NSData dataWithContentsOfFile: @"/Library/Desktop Pictures/Nature/Zen Garden.jpg"];

    CAssert(source);

    NSError *error;

    NSData *encoded;

    Log(@"Testing signing...");

    encoded = [MYEncoder encodeData: source signer: me recipient: nil error: &error];

    CAssertEq(error,nil);

    CAssert([encoded length]);

    Log(@"MYEncoder signed %u bytes into %u bytes", source.length,encoded.length);

    Log(@"Testing encryption...");

    encoded = [MYEncoder encodeData: source signer: nil recipient: me error: &error];

    CAssertEq(error,nil);

    CAssert([encoded length]);

    Log(@"MYEncoder encrypted %u bytes into %u bytes", source.length,encoded.length);

    Log(@"Testing signing+encryption...");

    encoded = [MYEncoder encodeData: source signer: me recipient: me error: &error];

    CAssertEq(error,nil);

    CAssert([encoded length]);

    Log(@"MYEncoder signed/encrypted %u bytes into %u bytes", source.length,encoded.length);

}

#endif