/*
 *  Copyright 2014-2022 The GmSSL Project. All Rights Reserved.
 *
 *  Licensed under the Apache License, Version 2.0 (the License); you may
 *  not use this file except in compliance with the License.
 *
 *  http://www.apache.org/licenses/LICENSE-2.0
 */


#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <gmssl/oid.h>
#include <gmssl/x509.h>
#include <gmssl/rand.h>
#include <gmssl/error.h>
#include <gmssl/tls.h>
#include <gmssl/sm3.h>
#include <gmssl/sm4.h>

static int test_tls_encode(void)
{
	uint8_t a1 = 200;
	uint16_t a2 = 30000;
	uint24_t a3 = 4000000;
	uint32_t a4 = 4000000000;
	uint8_t data[] = {1, 2, 3, 4, 5, 6, 7, 8};

	uint8_t r1;
	uint16_t r2;
	uint24_t r3;
	uint32_t r4;
	const uint8_t *pdata;
	size_t datalen;

	uint8_t buf[256];
	uint8_t *p = buf;
	const uint8_t *cp = buf;
	size_t len = 0;

	tls_uint8_to_bytes(a1, &p, &len);
	tls_uint16_to_bytes(a2, &p, &len);
	tls_uint24_to_bytes(a3, &p, &len);
	tls_uint32_to_bytes(a4, &p, &len);
	tls_uint8array_to_bytes(data, 5, &p, &len);
	tls_uint16array_to_bytes(data, 6, &p, &len);
	tls_uint24array_to_bytes(data, 7, &p, &len);

	if (tls_uint8_from_bytes(&r1, &cp, &len) != 1 || r1 != a1
		|| tls_uint16_from_bytes(&r2, &cp, &len) != 1 || r2 != a2
		|| tls_uint24_from_bytes(&r3, &cp, &len) != 1 || r3 != a3
		|| tls_uint32_from_bytes(&r4, &cp, &len) != 1 || r4 != a4
		|| tls_uint8array_from_bytes(&pdata, &datalen, &cp, &len) != 1 || datalen != 5 || memcmp(pdata, data, 5) != 0
		|| tls_uint16array_from_bytes(&pdata, &datalen, &cp, &len) != 1 || datalen != 6 || memcmp(pdata, data, 6) != 0
		|| tls_uint24array_from_bytes(&pdata, &datalen, &cp, &len) != 1 || datalen != 7 || memcmp(pdata, data, 7) != 0
		|| len > 0) {
		error_print();
		return -1;
	}

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_cbc(void)
{
	uint8_t key[32] = {0};
	SM3_HMAC_CTX hmac_ctx;
	SM4_KEY sm4_key;
	uint8_t seq_num[8] = { 0,0,0,0,0,0,0,1 };
	uint8_t header[5];
	uint8_t in[] = "hello world";
	uint8_t out[256];
	uint8_t buf[256] = {0};
	size_t len;
	size_t buflen;

	header[0] = TLS_record_handshake;
	header[1] = TLS_protocol_tls12 >> 8;
	header[2] = TLS_protocol_tls12 & 0xff;
	header[3] = sizeof(in) >> 8;
	header[4] = sizeof(in) & 0xff;

	sm3_hmac_init(&hmac_ctx, key, 32);
	sm4_set_encrypt_key(&sm4_key, key);
	tls_cbc_encrypt(&hmac_ctx, &sm4_key, seq_num, header, in, sizeof(in), out, &len);

	sm3_hmac_init(&hmac_ctx, key, 32);
	sm4_set_decrypt_key(&sm4_key, key);

	tls_cbc_decrypt(&hmac_ctx, &sm4_key, seq_num, header, out, len, buf, &buflen);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_random(void)
{
	uint8_t random[32];
	tls_random_generate(random);
	tls_random_print(stdout, random, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_client_hello(void)
{
	uint8_t record[512];
	size_t recordlen = 0;

	int version = TLS_protocol_tlcp;
	uint8_t random[32];
	int cipher_suites[] = {
		TLS_cipher_ecc_sm4_cbc_sm3,
		TLS_cipher_ecc_sm4_gcm_sm3,
		TLS_cipher_ecdhe_sm4_cbc_sm3,
		TLS_cipher_ecdhe_sm4_gcm_sm3,
		TLS_cipher_ibsdh_sm4_cbc_sm3,
		TLS_cipher_ibsdh_sm4_gcm_sm3,
		TLS_cipher_ibc_sm4_cbc_sm3,
		TLS_cipher_ibc_sm4_gcm_sm3,
		TLS_cipher_rsa_sm4_cbc_sm3,
		TLS_cipher_rsa_sm4_gcm_sm3,
		TLS_cipher_rsa_sm4_cbc_sha256,
		TLS_cipher_rsa_sm4_gcm_sha256,
	};
	int comp_meths[] = {0};

	tls_record_set_protocol(record, TLS_protocol_tlcp);
	if (tls_record_set_handshake_client_hello(record, &recordlen,
		version,
		random,
		NULL, 0,
		cipher_suites, sizeof(cipher_suites)/sizeof(cipher_suites[0]),
		NULL, 0) != 1) {
		error_print();
		return -1;
	}
	tls_client_hello_print(stdout, record + 5 + 4, recordlen - 5 -4, 0, 4);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_server_hello(void)
{
	uint8_t record[512];
	size_t recordlen = 0;

	uint8_t random[32];
	uint16_t cipher_suite = TLS_cipher_ecdhe_sm4_cbc_sm3;


	tls_record_set_protocol(record, TLS_protocol_tlcp);
	if (tls_record_set_handshake_server_hello(record, &recordlen,
		TLS_protocol_tlcp,
		random,
		NULL, 0,
		cipher_suite,
		NULL, 0) != 1) {
		error_print();
		return -1;
	}
	tls_server_hello_print(stdout, record + 5 + 4, recordlen - 5 -4, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_certificate(void)
{
	size_t recordlen = 0;
	FILE *fp = NULL;

	// 测试函数不要有外部的依赖
	// TODO: 输出一些握手过程的record字节数组和handshake字节数组，作为后续测试的测试数据

	/*
	if (!(fp = fopen("cacert.pem", "r"))) {
		error_print();
		return -1;
	}
	if (tls_record_set_handshake_certificate_from_pem(record, &recordlen, fp) != 1) {
		error_print();
		return -1;
	}
	tls_certificate_print(stdout, record + 9, recordlen - 9, 0, 0);
	*/

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_server_key_exchange(void)
{
	uint8_t record[1024];
	size_t recordlen = 0;
	uint8_t sig[SM2_MAX_SIGNATURE_SIZE] = {0xAA, 0xBB};
	const uint8_t *psig;
	size_t siglen;

	tls_record_set_protocol(record, TLS_protocol_tlcp);
	if (tlcp_record_set_handshake_server_key_exchange_pke(record, &recordlen, sig, sizeof(sig)) != 1) {
		error_print();
		return -1;
	}
	if (tlcp_record_get_handshake_server_key_exchange_pke(record, &psig, &siglen) != 1) {
		error_print();
		return -1;
	}
	format_bytes(stdout, 0, 0, "server_key_exchange siganture", psig, siglen);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_certificate_verify(void)
{
	uint8_t record[1024];
	size_t recordlen = 0;
	uint8_t sig[SM2_MAX_SIGNATURE_SIZE];
	const uint8_t *psig;
	size_t siglen;

	tls_record_set_protocol(record, TLS_protocol_tls12);
	if (tls_record_set_handshake_certificate_verify(record, &recordlen, sig, sizeof(sig)) != 1) {
		error_print();
		return -1;
	}
	if (tls_record_get_handshake_certificate_verify(record, &psig, &siglen) != 1) {
		error_print();
		return -1;
	}
	tls_certificate_verify_print(stdout, psig, siglen, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_finished(void)
{
	uint8_t record[1024];
	size_t recordlen = 0;
	uint8_t verify_data[12];
	const uint8_t *verify_data_ptr;
	size_t verify_data_len;

	if (tls_record_set_handshake_finished(record, &recordlen, verify_data, sizeof(verify_data)) != 1) {
		error_print();
		return -1;
	}
	if (tls_record_get_handshake_finished(record, &verify_data_ptr, &verify_data_len) != 1) {
		error_print();
		return -1;
	}
	tls_finished_print(stdout, verify_data_ptr, verify_data_len, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_alert(void)
{
	uint8_t record[1024];
	size_t recordlen = 0;
	int level;
	int reason;

	if (tls_record_set_alert(record, &recordlen, TLS_alert_level_fatal, TLS_alert_close_notify) != 1) {
		error_print();
		return -1;
	}
	if (tls_record_get_alert(record, &level, &reason) != 1) {
		error_print();
		return -1;
	}
	tls_alert_print(stdout, record + 5, recordlen - 5, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_change_cipher_spec(void)
{
	uint8_t record[1024];
	size_t recordlen = 0;

	if (tls_record_set_change_cipher_spec(record, &recordlen) != 1) {
		error_print();
		return -1;
	}
	if (tls_record_get_change_cipher_spec(record) != 1) {
		error_print();
		return -1;
	}
	tls_change_cipher_spec_print(stdout, record + 5, recordlen - 5, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_tls_application_data(void)
{
	uint8_t record[1024];
	size_t recordlen = 0;
	uint8_t data[88];
	const uint8_t *p;
	size_t len;

	if (tls_record_set_application_data(record, &recordlen, data, sizeof(data)) != 1) {
		error_print();
		return -1;
	}
	if (tls_record_get_application_data(record, &p, &len) != 1) {
		error_print();
		return -1;
	}
	tls_application_data_print(stdout, p, len, 0, 0);

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

int main(void)
{
	if (test_tls_encode() != 1) goto err;
	if (test_tls_cbc() != 1) goto err;
	if (test_tls_random() != 1) goto err;
	if (test_tls_client_hello() != 1) goto err;
	if (test_tls_server_hello() != 1) goto err;
	if (test_tls_certificate() != 1) goto err;
	if (test_tls_server_key_exchange() != 1) goto err;
	if (test_tls_certificate_verify() != 1) goto err;
	//if (test_tls_finished() != 1) goto err; //FIXME
	if (test_tls_alert() != 1) goto err;
	if (test_tls_change_cipher_spec() != 1) goto err;
	if (test_tls_application_data() != 1) goto err;
	printf("%s all tests passed\n", __FILE__);
	return 0;
err:
	error_print();
	return -1;
}