/* Copyright (C) 2012 the GSS-PROXY contributors, see COPYING for license */

#include "gss_plugin.h"

OM_uint32 gssi_wrap(OM_uint32 *minor_status,
                    gss_ctx_id_t context_handle,
                    int conf_req_flag,
                    gss_qop_t qop_req,
                    gss_buffer_t input_message_buffer,
                    int *conf_state,
                    gss_buffer_t output_message_buffer)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_wrap(minor_status, ctx_handle->local,
                    conf_req_flag, qop_req,
                    input_message_buffer, conf_state,
                    output_message_buffer);
}

OM_uint32 gssi_wrap_size_limit(OM_uint32 *minor_status,
                               gss_ctx_id_t context_handle,
                               int conf_req_flag,
                               gss_qop_t qop_req,
                               OM_uint32 req_output_size,
                               OM_uint32 *max_input_size)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_wrap_size_limit(minor_status, ctx_handle->local,
                               conf_req_flag, qop_req,
                               req_output_size, max_input_size);
}

OM_uint32 gssi_wrap_iov(OM_uint32 *minor_status,
                        gss_ctx_id_t context_handle,
                        int conf_req_flag,
                        gss_qop_t qop_req,
                        int *conf_state,
                        gss_iov_buffer_desc *iov,
                        int iov_count)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_wrap_iov(minor_status, ctx_handle->local,
                        conf_req_flag, qop_req, conf_state,
                        iov, iov_count);
}

OM_uint32 gssi_wrap_iov_length(OM_uint32 *minor_status,
                               gss_ctx_id_t context_handle,
                               int conf_req_flag,
                               gss_qop_t qop_req,
                               int *conf_state,
                               gss_iov_buffer_desc *iov,
                               int iov_count)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_wrap_iov_length(minor_status, ctx_handle->local,
                               conf_req_flag, qop_req, conf_state,
                               iov, iov_count);
}

OM_uint32 gssi_wrap_aead(OM_uint32 *minor_status,
	                 gss_ctx_id_t context_handle,
	                 int conf_req_flag,
	                 gss_qop_t qop_req,
	                 gss_buffer_t input_assoc_buffer,
	                 gss_buffer_t input_payload_buffer,
	                 int *conf_state,
	                 gss_buffer_t output_message_buffer)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_wrap_aead(minor_status, ctx_handle->local,
                         conf_req_flag, qop_req,
                         input_assoc_buffer, input_payload_buffer,
                         conf_state, output_message_buffer);
}

OM_uint32 gssi_unwrap(OM_uint32 *minor_status,
                      gss_ctx_id_t context_handle,
                      gss_buffer_t input_message_buffer,
                      gss_buffer_t output_message_buffer,
                      int *conf_state,
                      gss_qop_t *qop_state)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_unwrap(minor_status, ctx_handle->local,
                      input_message_buffer, output_message_buffer,
                      conf_state, qop_state);
}

OM_uint32 gssi_unwrap_iov(OM_uint32 *minor_status,
                          gss_ctx_id_t context_handle,
                          int *conf_state,
                          gss_qop_t *qop_state,
                          gss_iov_buffer_desc *iov,
                          int iov_count)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_unwrap_iov(minor_status, ctx_handle->local,
                          conf_state, qop_state, iov, iov_count);
}

OM_uint32 gssi_unwrap_aead(OM_uint32 *minor_status,
                           gss_ctx_id_t context_handle,
                           gss_buffer_t input_message_buffer,
                           gss_buffer_t input_assoc_buffer,
                           gss_buffer_t output_payload_buffer,
                           int *conf_state,
                           gss_qop_t *qop_state)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_unwrap_aead(minor_status, ctx_handle->local,
                           input_message_buffer, input_assoc_buffer,
                           output_payload_buffer,
                           conf_state, qop_state);
}

OM_uint32 gssi_get_mic(OM_uint32 *minor_status,
                       gss_ctx_id_t context_handle,
                       gss_qop_t qop_req,
                       gss_buffer_t message_buffer,
                       gss_buffer_t message_token)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_get_mic(minor_status,
                       ctx_handle->local,
                       qop_req,
                       message_buffer,
                       message_token);
}

OM_uint32 gssi_verify_mic(OM_uint32 *minor_status,
                          gss_ctx_id_t context_handle,
                          gss_buffer_t message_buffer,
                          gss_buffer_t message_token,
                          gss_qop_t *qop_state)
{
    struct gpp_context_handle *ctx_handle;
    OM_uint32 maj, min;

    GSSI_TRACE();

    ctx_handle = (struct gpp_context_handle *)context_handle;
    if (!ctx_handle) {
        return GSS_S_CALL_INACCESSIBLE_READ;
    }

    /* for now we do encryption only locally and only for specific known
     * mechanisms for which we can export/import the context */
    if (ctx_handle->remote && !ctx_handle->local) {
        maj = gpp_remote_to_local_ctx(&min, &ctx_handle->remote,
                                            &ctx_handle->local);
        if (maj != GSS_S_COMPLETE) {
            *minor_status = gpp_map_error(min);
            return maj;
        }
    }

    return gss_verify_mic(minor_status,
                          ctx_handle->local,
                          message_buffer,
                          message_token,
                          qop_state);
}