//

 //  MYEncoder.m

 //  MYCrypto

 //

 //  Created by Jens Alfke on 1/16/08.

 //  Copyright 2008-2009 Jens Alfke. All rights reserved.

 //

 #import "MYEncoder.h"

 #import "MYIdentity.h"

 #import "MYCrypto_Private.h"

 #import "Test.h"

 #import "MYErrorUtils.h"

 @implementation MYEncoder

 - (id) init

 {

     self = [super init];

     if (self != nil) {

         if( ! checksave(CMSEncoderCreate(&_encoder)) ) {

             [self release];

             return nil;

         }

     }

     return self;

 }

 - (void) dealloc

 {

     if(_encoder) CFRelease(_encoder);

     [super dealloc];

 }

 - (BOOL) addSigner: (MYIdentity*)signer

 {

     Assert(signer);

     return checksave( CMSEncoderAddSigners(_encoder, signer.identityRef) );

 }

 - (BOOL) addRecipient: (MYCertificate*)recipient

 {

     Assert(recipient);

     return checksave( CMSEncoderAddRecipients(_encoder, recipient.certificateRef) );

 }

 - (BOOL) addSupportingCert: (MYCertificate*)supportingCert

 {

     Assert(supportingCert);

     return checksave( CMSEncoderAddSupportingCerts(_encoder, supportingCert.certificateRef) );

 }

 - (BOOL) addTimestamp

 {

     return checksave( CMSEncoderAddSignedAttributes(_encoder, kCMSAttrSigningTime) );

 }

 - (NSError*) error

 {

     if( _error )

         return MYError(_error, NSOSStatusErrorDomain, 

                        @"%@", MYErrorName(NSOSStatusErrorDomain,_error));

     else

         return nil;

 }

 - (CMSCertificateChainMode) certificateChainMode

 {

     CMSCertificateChainMode mode;

     if( CMSEncoderGetCertificateChainMode(_encoder, &mode) == noErr )

         return mode;

     else

         return -1;

 }

 - (void) setCertificateChainMode: (CMSCertificateChainMode)mode

 {

     checksave( CMSEncoderSetCertificateChainMode(_encoder, mode) );

 }

 - (BOOL) hasDetachedContent

 {

     Boolean detached;

     return CMSEncoderGetHasDetachedContent(_encoder, &detached)==noErr && detached;

 }

 - (void) setHasDetachedContent: (BOOL)detached

 {

     checksave( CMSEncoderSetHasDetachedContent(_encoder, detached) );

 }

 - (NSData*) _dataFromFunction: (OSStatus (*)(CMSEncoderRef,CFDataRef*))function

 {

     CFDataRef data=NULL;

     if( checksave( (*function)(_encoder, &data) ) )

         return [(NSData*)CFMakeCollectable(data) autorelease];

     else

         return nil;

 }

 - (CSSM_OID) contentType

 {

    NSData *data = [self _dataFromFunction: &CMSEncoderCopyEncapsulatedContentType];

    return (CSSM_OID){data.length,(uint8*)data.bytes};

 }

 - (void) setContentType: (CSSM_OID)contentType

 {

     checksave( CMSEncoderSetEncapsulatedContentType(_encoder, &contentType) );

 }

 - (BOOL) addData: (NSData*)data

 {

     Assert(data);

     return ! _error && checksave( CMSEncoderUpdateContent(_encoder, data.bytes, data.length) );

 }

 - (NSData*) encodedData

 {

     if( ! _error )

         return [self _dataFromFunction: &CMSEncoderCopyEncodedContent];

     else

         return nil;

 }

 + (NSData*) encodeData: (NSData*)data

                 signer: (MYIdentity*)signer

              recipient: (MYCertificate*)recipient

                  error: (NSError**)outError

 {

     MYEncoder *e = [[self alloc] init];

     if( signer )

         [e addSigner: signer];

     if( recipient )

         [e addRecipient: recipient];

     [e addData: data];

     *outError = e.error;

     NSData *result = e.encodedData;

     [e release];

     return result;

 }

 @end

 #if DEBUG

 #import "MYCrypto+Cocoa.h"

 TestCase(MYEncoder) {

     MYIdentity *me = nil;//[MYIdentity preferredIdentityForName: @"MYCryptoTest"];

     if (!me) {

         NSArray *idents = [[[MYKeychain allKeychains] enumerateIdentities] allObjects];

         SFChooseIdentityPanel *panel = [SFChooseIdentityPanel sharedChooseIdentityPanel];

         [panel setAlternateButtonTitle: @"Cancel"];

         if ([panel my_runModalForIdentities: idents 

                                     message: @"Choose an identity for the MYEncoder test case:"]

                 != NSOKButton) {

             [NSException raise: NSGenericException format: @"User canceled"];

         }

         me = [panel my_identity];

         [me makePreferredIdentityForName: @"MYCryptoTest"];

     }

     CAssert(me,@"No default identity has been set up in the Keychain");

     NSData *source = [NSData dataWithContentsOfFile: @"/Library/Desktop Pictures/Nature/Zen Garden.jpg"];

     CAssert(source);

     NSError *error;

     NSData *encoded;

     Log(@"Testing signing...");

     encoded = [MYEncoder encodeData: source signer: me recipient: nil error: &error];

     CAssertEq(error,nil);

     CAssert([encoded length]);

     Log(@"MYEncoder signed %u bytes into %u bytes", source.length,encoded.length);

     Log(@"Testing encryption...");

     encoded = [MYEncoder encodeData: source signer: nil recipient: me error: &error];

     CAssertEq(error,nil);

     CAssert([encoded length]);

     Log(@"MYEncoder encrypted %u bytes into %u bytes", source.length,encoded.length);

     Log(@"Testing signing+encryption...");

     encoded = [MYEncoder encodeData: source signer: me recipient: me error: &error];

     CAssertEq(error,nil);

     CAssert([encoded length]);

     Log(@"MYEncoder signed/encrypted %u bytes into %u bytes", source.length,encoded.length);

 }

 #endif