/*
 * zkey-ekmfweb - EKMFWeb zkey KMS plugin
 *
 * Copyright IBM Corp. 2020
 *
 * s390-tools is free software; you can redistribute it and/or modify
 * it under the terms of the MIT license. See LICENSE for details.
 */

#ifndef ZKEY_EKMFWEB_H
#define ZKEY_EKMFWEB_H

#include <stddef.h>
#include <stdbool.h>

#include "ekmfweb/ekmfweb.h"

#include "../plugin-utils.h"

struct plugin_handle {
	struct plugin_data pd;
	bool apqns_configured;
	bool connection_configured;
	bool settings_retrieved;
	bool templates_retrieved;
	bool identity_key_generated;
	bool registered;
	bool config_complete;
	struct ekmf_ext_lib ext_lib;
	struct ekmf_cca_lib cca;
	struct ekmf_config ekmf_config;
	CURL *curl_handle;
};

#define EKMFWEB_CONFIG_FILE			"ekmfweb.conf"
#define EKMFWEB_CONFIG_SERVER_CERT_FILE		"server-cert.pem"
#define EKMFWEB_CONFIG_SERVER_PUBKEY_FILE	"server-pubkey.pem"
#define EKMFWEB_CONFIG_LOGIN_TOKEN_FILE		"login.token"
#define EKMFWEB_CONFIG_EKMFWEB_PUBKEY_FILE	"ekmfweb-pubkey.pem"
#define EKMFWEB_CONFIG_IDENTITY_KEY_FILE	"identity-key.skey"
#define EKMFWEB_CONFIG_IDENTITY_KEY_REENC_FILE	"identity-key.reenc"

#define EKMFWEB_CONFIG_APQNS			"apqns"
#define EKMFWEB_CONFIG_URL			"url"
#define EKMFWEB_CONFIG_CA_BUNDLE		"ca-bundle"
#define EKMFWEB_CONFIG_CLIENT_CERT		"client-cert"
#define EKMFWEB_CONFIG_CLIENT_KEY		"client-key"
#define EKMFWEB_CONFIG_CLIENT_KEY_PASSPHRASE	"client-key-passphrase"
#define EKMFWEB_CONFIG_SERVER_CERT		"server-cert"
#define EKMFWEB_CONFIG_SERVER_PUBKEY		"server-pubkey"
#define EKMFWEB_CONFIG_VERIFY_SERVER_CERT	"verify-server-cert"
#define EKMFWEB_CONFIG_VERIFY_HOSTNAME		"verify-hostname"
#define EKMFWEB_CONFIG_LOGIN_TOKEN		"login-token"
#define EKMFWEB_CONFIG_PASSCODE_URL		"passcode-url"
#define EKMFWEB_CONFIG_EKMFWEB_PUBKEY		"ekmfweb-pubkey"
#define EKMFWEB_CONFIG_TEMPLATE_XTS1		"template-xts1"
#define EKMFWEB_CONFIG_TEMPLATE_XTS2		"template-xts2"
#define EKMFWEB_CONFIG_TEMPLATE_NONXTS		"template-nonxts"
#define EKMFWEB_CONFIG_TEMPLATE_IDENTITY	"template-identity"
#define EKMFWEB_CONFIG_TEMPLATE_XTS1_LABEL	"template-xts1-label"
#define EKMFWEB_CONFIG_TEMPLATE_XTS2_LABEL	"template-xts2-label"
#define EKMFWEB_CONFIG_TEMPLATE_NONXTS_LABEL	"template-nonxts-label"
#define EKMFWEB_CONFIG_TEMPLATE_IDENTITY_LABEL	"template-identity-label"
#define EKMFWEB_CONFIG_TEMPLATE_XTS1_ID		"template-xts1-id"
#define EKMFWEB_CONFIG_TEMPLATE_XTS2_ID		"template-xts2-id"
#define EKMFWEB_CONFIG_TEMPLATE_NONXTS_ID	"template-nonxts-id"
#define EKMFWEB_CONFIG_TEMPLATE_IDENTITY_ID	"template-identity-id"
#define EKMFWEB_CONFIG_IDENTITY_KEY		"identity-key"
#define EKMFWEB_CONFIG_IDENTITY_KEY_ALGORITHM	"identity-key-algorithm"
#define EKMFWEB_CONFIG_IDENTITY_KEY_PARAMS	"identity-key-params"
#define EKMFWEB_CONFIG_IDENTITY_KEY_REENC	"identity-key-reenc"
#define EKMFWEB_CONFIG_IDENTITY_KEY_LABEL	"identity-key-label"
#define EKMFWEB_CONFIG_IDENTITY_KEY_ID		"identity-key-id"
#define EKMFWEB_CONFIG_SESSION_KEY_CURVE	"session-key-curve"
#ifdef EKMFWEB_SUPPORTS_RSA_DIGESTS_AND_PSS_SIGNATURES
#define EKMFWEB_CONFIG_SESSION_RSA_SIGN_DIGEST	"session-rsa-sign-digest"
#define EKMFWEB_CONFIG_SESSION_RSA_SIGN_PSS	"session-rsa-sign-pss"
#endif

#define EKMFWEB_PASSCODE_URL			"/administration/passcode"
#define EKMFWEB_TEMPLATE_STATE_ACTIVE		"ACTIVE"
#define EKMFWEB_TEMPLATE_STATE_HISTORY		"HISTORY"
#define EKMFWEB_KEYSTORE_TYPE_PERV_ENCR		"PERVASIVE_ENCRYPTION"
#define EKMFWEB_KEYSTORE_TYPE_IDENTITY		"IDENTITY"
#define EKMFWEB_KEY_ALGORITHM_AES		"AES"
#define EKMFWEB_KEY_ALGORITHM_ECC		"ECC"
#define EKMFWEB_KEY_ALGORITHM_RSA		"RSA"
#define EKMFWEB_KEY_TYPE_CIPHER			"CIPHER"
#define EKMFWEB_KEY_STATE_PRE_ACTIVATION	"PRE-ACTIVATION"
#define EKMFWEB_KEY_STATE_ACTIVE		"ACTIVE"
#define EKMFWEB_KEY_STATE_DEACTIVATED		"DEACTIVATED"
#define EKMFWEB_KEY_STATE_COMPROMISED		"COMPROMISED"
#define EKMFWEB_KEY_STATE_DESTROYED		"DESTROYED"
#define EKMFWEB_KEY_STATE_DESTROYED_COMPROMISED	"DESTROYED-COMPROMISED"
#define EKMFWEB_CURVE_PRIME			"PRIME_CURVE"
#define EKMFWEB_CURVE_BAINPOOL			"BRAINPOOL_CURVE"
#define EKMFWEB_SEQNO_TAG			"seqno"
#define EKMFWEB_SEQNO_NEXT			"next"

#define DEFAULT_IDENTITY_KEY_PUBLIC_EXPONENT	65537

#define CCA_LIBRARY_NAME	"libcsulcca.so"
#define CCA_WEB_PAGE		"http://www.ibm.com/security/cryptocards"

#endif