resource/csdk/security/provisioning/src/ownershiptransfermanager.c

   1 /* *****************************************************************
   2  *
   3  * Copyright 2015 Samsung Electronics All Rights Reserved.
   4  *
   5  *
   6  *
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *     http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  *
  19  * *****************************************************************/
  20
  21 // Defining _POSIX_C_SOURCE macro with 199309L (or greater) as value
  22 // causes header files to expose definitions
  23 // corresponding to the POSIX.1b, Real-time extensions
  24 // (IEEE Std 1003.1b-1993) specification
  25 //
  26 // For this specific file, see use of clock_gettime,
  27 // Refer to http://pubs.opengroup.org/stage7tc1/functions/clock_gettime.html
  28 // and to http://man7.org/linux/man-pages/man2/clock_gettime.2.html
  29 #ifndef _POSIX_C_SOURCE
  30 #define _POSIX_C_SOURCE 200809L
  31 #endif
  32
  33 #include <time.h>
  34 #include <unistd.h>
  35 #include <sys/time.h>
  36 #include <stdbool.h>
  37 #include <string.h>
  38
  39 #include "logger.h"
  40 #include "oic_malloc.h"
  41 #include "oic_string.h"
  42 #include "cacommon.h"
  43 #include "cainterface.h"
  44 #include "base64.h"
  45 #include "cJSON.h"
  46 #include "global.h"
  47
  48 #include "srmresourcestrings.h"
  49 #include "doxmresource.h"
  50 #include "pstatresource.h"
  51 #include "credresource.h"
  52 #include "aclresource.h"
  53 #include "ownershiptransfermanager.h"
  54 #include "securevirtualresourcetypes.h"
  55 #include "oxmjustworks.h"
  56 #include "pmtypes.h"
  57 #include "pmutility.h"
  58 #include "srmutility.h"
  59 #include "provisioningdatabasemanager.h"
  60 #include "oxmrandompin.h"
  61 #include "ocpayload.h"
  62 #include "payload_logging.h"
  63
  64 #define TAG "OTM"
  65
  66 /**
  67  * Array to store the callbacks for each owner transfer method.
  68  */
  69 static OTMCallbackData_t g_OTMDatas[OIC_OXM_COUNT];
  70
  71 /**
  72  * Variable for storing provisioning tool's provisioning capabilities
  73  * Must be in decreasing order of preference. More prefered method should
  74  * have lower array index.
  75  */
  76 static OicSecDpom_t gProvisioningToolCapability[] = { SINGLE_SERVICE_CLIENT_DRIVEN };
  77
  78 /**
  79  * Number of supported provisioning methods
  80  * current version supports only one.
  81  */
  82 static size_t gNumOfProvisioningMethodsPT = 1;
  83
  84 /**
  85  * Variables for pointing the OTMContext to be used in the DTLS handshake result callback.
  86  */
  87 static OTMContext_t* g_otmCtx = NULL;
  88
  89 /**
  90  * Function to select appropriate  provisioning method.
  91  *
  92  * @param[in] supportedMethods   Array of supported methods
  93  * @param[in] numberOfMethods   number of supported methods
  94  * @param[out]  selectedMethod         Selected methods
  95  * @return  OC_STACK_OK on success
  96  */
  97 static OCStackResult SelectProvisioningMethod(const OicSecOxm_t *supportedMethods,
  98                                                             size_t numberOfMethods,
  99                                                             OicSecOxm_t *selectedMethod)
 100 {
 101     OIC_LOG(DEBUG, TAG, "IN SelectProvisioningMethod");
 102
 103     if(numberOfMethods == 0 || !supportedMethods)
 104     {
 105         OIC_LOG(WARNING, TAG, "Could not find a supported OxM.");
 106         return OC_STACK_ERROR;
 107     }
 108
 109     *selectedMethod  = supportedMethods[0];
 110     for(size_t i = 0; i < numberOfMethods; i++)
 111     {
 112         if(*selectedMethod < supportedMethods[i])
 113         {
 114             *selectedMethod =  supportedMethods[i];
 115         }
 116     }
 117
 118     return OC_STACK_OK;
 119 }
 120
 121 /**
 122  * Function to select operation mode.This function will return most secure common operation mode.
 123  *
 124  * @param[in] selectedDeviceInfo   selected device information to performing provisioning.
 125  * @param[out]   selectedMode   selected operation mode
 126  * @return  OC_STACK_OK on success
 127  */
 128 static void SelectOperationMode(const OCProvisionDev_t *selectedDeviceInfo,
 129                                 OicSecDpom_t *selectedMode)
 130 {
 131     OIC_LOG(DEBUG, TAG, "IN SelectOperationMode");
 132
 133     size_t i = 0;
 134     size_t j = 0;
 135
 136     while (i < gNumOfProvisioningMethodsPT && j < selectedDeviceInfo->pstat->smLen)
 137     {
 138         if (gProvisioningToolCapability[i] < selectedDeviceInfo->pstat->sm[j])
 139         {
 140             i++;
 141         }
 142         else if (selectedDeviceInfo->pstat->sm[j] < gProvisioningToolCapability[i])
 143         {
 144             j++;
 145         }
 146         else /* if gProvisioningToolCapability[i] == deviceSupportedMethods[j] */
 147         {
 148             *selectedMode = gProvisioningToolCapability[j];
 149             break;
 150         }
 151     }
 152     OIC_LOG_V(DEBUG, TAG, "Selected Operation Mode = %d", *selectedMode);
 153
 154     OIC_LOG(DEBUG, TAG, "OUT SelectOperationMode");
 155 }
 156
 157 /**
 158  * Function to start ownership transfer.
 159  * This function will send the first request for provisioning,
 160  * The next request message is sent from the response handler for this request.
 161  *
 162  * @param[in] ctx   context value passed to callback from calling function.
 163  * @param[in] selectedDevice   selected device information to performing provisioning.
 164  * @return  OC_STACK_OK on success
 165  */
 166 static OCStackResult StartOwnershipTransfer(void* ctx, OCProvisionDev_t* selectedDevice);
 167
 168 /**
 169  * Function to update owner transfer mode
 170  *
 171  * @param[in]  otmCtx  Context value of ownership transfer.
 172  * @return  OC_STACK_OK on success
 173  */
 174 static OCStackResult PutOwnerTransferModeToResource(OTMContext_t* otmCtx);
 175
 176 /**
 177  * Function to send request to resource to get its pstat resource information.
 178  *
 179  * @param[in]  otmCtx  Context value of ownership transfer.
 180  * @return  OC_STACK_OK on success
 181  */
 182 static OCStackResult GetProvisioningStatusResource(OTMContext_t* otmCtx);
 183
 184
 185 /**
 186  * Function to send  uuid of owner device to new device.
 187  * This function would update 'owner of doxm' as UUID for provisioning tool.
 188  *
 189  * @param[in]  otmCtx  Context value of ownership transfer.
 190  * @return  OC_STACK_OK on success
 191  */
 192 static OCStackResult PutOwnerUuid(OTMContext_t* otmCtx);
 193
 194 /**
 195  * Function to update the operation mode. As per the spec. Operation mode in client driven
 196  * single service provisioning it will be updated to 0x3
 197  *
 198  * @param[in]  otmCtx  Context value of ownership transfer.
 199  * @return  OC_STACK_OK on success
 200  */
 201 static OCStackResult PutUpdateOperationMode(OTMContext_t* otmCtx);
 202
 203 /**
 204  * Function to update the owner credential to new device
 205  *
 206  * @param[in]  otmCtx  Context value of ownership transfer.
 207  * @param[in] selectedOperationMode selected operation mode
 208  * @return  OC_STACK_OK on success
 209  */
 210 static OCStackResult PutOwnerCredential(OTMContext_t* otmCtx);
 211
 212 /**
 213  * Function to send ownerShip info.
 214  * This function would update 'owned of doxm' as true.
 215  *
 216  * @param[in]  otmCtx  Context value of ownership transfer.
 217  * @return  OC_STACK_OK on success
 218  */
 219 static OCStackResult PutOwnershipInformation(OTMContext_t* otmCtx);
 220
 221 /**
 222  * Function to update pstat when finalize provisioning.
 223  * This function would update 'cm' as bx0011,1100 and 'tm' as bx0000,0000.
 224  *
 225  * @param[in] ctx   context value passed to callback from calling function.
 226  * @param[in] selectedDevice   selected device information to performing provisioning.
 227  * @return  OC_STACK_OK on success
 228  */
 229 static OCStackResult PutProvisioningStatus(OTMContext_t* otmCtx);
 230
 231 static bool IsComplete(OTMContext_t* otmCtx)
 232 {
 233     for(size_t i = 0; i < otmCtx->ctxResultArraySize; i++)
 234     {
 235         if(OC_STACK_CONTINUE == otmCtx->ctxResultArray[i].res)
 236         {
 237             return false;
 238         }
 239     }
 240
 241     return true;
 242 }
 243
 244 /**
 245  * Function to save the result of provisioning.
 246  *
 247  * @param[in,out] otmCtx   Context value of ownership transfer.
 248  * @param[in] res   result of provisioning
 249  */
 250 static void SetResult(OTMContext_t* otmCtx, const OCStackResult res)
 251 {
 252     OIC_LOG_V(DEBUG, TAG, "IN SetResult : %d ", res);
 253
 254     if(!otmCtx)
 255     {
 256         OIC_LOG(WARNING, TAG, "OTMContext is NULL");
 257         return;
 258     }
 259
 260     if(otmCtx->selectedDeviceInfo)
 261     {
 262         //Revert psk_info callback and new deivce uuid in case of random PIN OxM
 263         if(OIC_RANDOM_DEVICE_PIN == otmCtx->selectedDeviceInfo->doxm->oxmSel)
 264         {
 265             if(CA_STATUS_OK != CARegisterDTLSCredentialsHandler(GetDtlsPskCredentials))
 266             {
 267                 OIC_LOG(WARNING, TAG, "Failed to revert  is DTLS credential handler.");
 268             }
 269             OicUuid_t emptyUuid = { .id={0}};
 270             SetUuidForRandomPinOxm(&emptyUuid);
 271         }
 272
 273         for(size_t i = 0; i < otmCtx->ctxResultArraySize; i++)
 274         {
 275             if(memcmp(otmCtx->selectedDeviceInfo->doxm->deviceID.id,
 276                       otmCtx->ctxResultArray[i].deviceId.id, UUID_LENGTH) == 0)
 277             {
 278                 otmCtx->ctxResultArray[i].res = res;
 279                 if(OC_STACK_OK != res)
 280                 {
 281                     otmCtx->ctxHasError = true;
 282                 }
 283             }
 284         }
 285
 286         g_otmCtx = NULL;
 287
 288         //If all request is completed, invoke the user callback.
 289         if(IsComplete(otmCtx))
 290         {
 291             otmCtx->ctxResultCallback(otmCtx->userCtx, otmCtx->ctxResultArraySize,
 292                                        otmCtx->ctxResultArray, otmCtx->ctxHasError);
 293             OICFree(otmCtx->ctxResultArray);
 294             OICFree(otmCtx);
 295         }
 296         else
 297         {
 298             if(OC_STACK_OK != StartOwnershipTransfer(otmCtx,
 299                                                      otmCtx->selectedDeviceInfo->next))
 300             {
 301                 OIC_LOG(ERROR, TAG, "Failed to StartOwnershipTransfer");
 302             }
 303         }
 304     }
 305
 306     OIC_LOG(DEBUG, TAG, "OUT SetResult");
 307 }
 308
 309 /**
 310  * Function to handle the handshake result in OTM.
 311  * This function will be invoked after DTLS handshake
 312  * @param   endPoint  [IN] The remote endpoint.
 313  * @param   errorInfo [IN] Error information from the endpoint.
 314  * @return  NONE
 315  */
 316 void DTLSHandshakeCB(const CAEndpoint_t *endpoint, const CAErrorInfo_t *info)
 317 {
 318     if(NULL != g_otmCtx && NULL != g_otmCtx->selectedDeviceInfo &&
 319        NULL != endpoint && NULL != info)
 320     {
 321         OIC_LOG_V(INFO, TAG, "Received status from remote device(%s:%d) : %d",
 322                  endpoint->addr, endpoint->port, info->result);
 323
 324         OicSecDoxm_t* newDevDoxm = g_otmCtx->selectedDeviceInfo->doxm;
 325
 326         if(NULL != newDevDoxm)
 327         {
 328             OicUuid_t emptyUuid = {.id={0}};
 329
 330             //Make sure the address matches.
 331             if(strncmp(g_otmCtx->selectedDeviceInfo->endpoint.addr,
 332                endpoint->addr,
 333                sizeof(endpoint->addr)) == 0 &&
 334                g_otmCtx->selectedDeviceInfo->securePort == endpoint->port)
 335             {
 336                 OCStackResult res = OC_STACK_ERROR;
 337
 338                 //If temporal secure sesstion established successfully
 339                 if(CA_STATUS_OK == info->result &&
 340                    false == newDevDoxm->owned &&
 341                    memcmp(&(newDevDoxm->owner), &emptyUuid, sizeof(OicUuid_t)) == 0)
 342                 {
 343                     //Send request : PUT /oic/sec/doxm [{... , "devowner":"PT's UUID"}]
 344                     res = PutOwnerUuid(g_otmCtx);
 345                     if(OC_STACK_OK != res)
 346                     {
 347                         OIC_LOG(ERROR, TAG, "OperationModeUpdate : Failed to send owner information");
 348                         SetResult(g_otmCtx, res);
 349                     }
 350                 }
 351                 //In case of authentication failure
 352                 else if(CA_DTLS_AUTHENTICATION_FAILURE == info->result)
 353                 {
 354                     //in case of error from owner credential
 355                     if(memcmp(&(newDevDoxm->owner), &emptyUuid, sizeof(OicUuid_t)) != 0 &&
 356                         true == newDevDoxm->owned)
 357                     {
 358                         OIC_LOG(ERROR, TAG, "The owner credential may incorrect.");
 359
 360                         if(OC_STACK_OK != RemoveCredential(&(newDevDoxm->deviceID)))
 361                         {
 362                             OIC_LOG(WARNING, TAG, "Failed to remove the invaild owner credential");
 363                         }
 364                         SetResult(g_otmCtx, OC_STACK_AUTHENTICATION_FAILURE);
 365                     }
 366                     //in case of error from wrong PIN, re-start the ownership transfer
 367                     else if(OIC_RANDOM_DEVICE_PIN == newDevDoxm->oxmSel)
 368                     {
 369                         OIC_LOG(ERROR, TAG, "The PIN number may incorrect.");
 370
 371                         memcpy(&(newDevDoxm->owner), &emptyUuid, sizeof(OicUuid_t));
 372                         newDevDoxm->owned = false;
 373                         g_otmCtx->attemptCnt++;
 374
 375                         if(WRONG_PIN_MAX_ATTEMP > g_otmCtx->attemptCnt)
 376                         {
 377                             res = StartOwnershipTransfer(g_otmCtx, g_otmCtx->selectedDeviceInfo);
 378                             if(OC_STACK_OK != res)
 379                             {
 380                                 SetResult(g_otmCtx, res);
 381                                 OIC_LOG(ERROR, TAG, "Failed to Re-StartOwnershipTransfer");
 382                             }
 383                         }
 384                         else
 385                         {
 386                             OIC_LOG(ERROR, TAG, "User has exceeded the number of authentication attempts.");
 387                             SetResult(g_otmCtx, OC_STACK_AUTHENTICATION_FAILURE);
 388                         }
 389                     }
 390                     else
 391                     {
 392                         OIC_LOG(ERROR, TAG, "Failed to establish secure session.");
 393                         SetResult(g_otmCtx, OC_STACK_AUTHENTICATION_FAILURE);
 394                     }
 395                 }
 396             }
 397         }
 398     }
 399 }
 400
 401 /**
 402  * Function to save ownerPSK at provisioning tool end.
 403  *
 404  * @param[in] selectedDeviceInfo   selected device information to performing provisioning.
 405  * @return  OC_STACK_OK on success
 406  */
 407 static OCStackResult SaveOwnerPSK(OCProvisionDev_t *selectedDeviceInfo)
 408 {
 409     OIC_LOG(DEBUG, TAG, "IN SaveOwnerPSK");
 410
 411     OCStackResult res = OC_STACK_ERROR;
 412
 413     CAEndpoint_t endpoint;
 414     memset(&endpoint, 0x00, sizeof(CAEndpoint_t));
 415     OICStrcpy(endpoint.addr, MAX_ADDR_STR_SIZE_CA, selectedDeviceInfo->endpoint.addr);
 416     endpoint.addr[MAX_ADDR_STR_SIZE_CA - 1] = '\0';
 417     endpoint.port = selectedDeviceInfo->securePort;
 418
 419     OicUuid_t ptDeviceID = {.id={0}};
 420     if (OC_STACK_OK != GetDoxmDeviceID(&ptDeviceID))
 421     {
 422         OIC_LOG(ERROR, TAG, "Error while retrieving provisioning tool's device ID");
 423         return res;
 424     }
 425
 426     uint8_t ownerPSK[OWNER_PSK_LENGTH_128] = {0};
 427
 428     //Generating OwnerPSK
 429     CAResult_t pskRet = CAGenerateOwnerPSK(&endpoint,
 430             (uint8_t *)GetOxmString(selectedDeviceInfo->doxm->oxmSel),
 431             strlen(GetOxmString(selectedDeviceInfo->doxm->oxmSel)),
 432             ptDeviceID.id, sizeof(ptDeviceID.id),
 433             selectedDeviceInfo->doxm->deviceID.id, sizeof(selectedDeviceInfo->doxm->deviceID.id),
 434             ownerPSK, OWNER_PSK_LENGTH_128);
 435
 436     if (CA_STATUS_OK == pskRet)
 437     {
 438         OIC_LOG(INFO, TAG,"ownerPSK dump:\n");
 439         OIC_LOG_BUFFER(INFO, TAG,ownerPSK, OWNER_PSK_LENGTH_128);
 440         //Generating new credential for provisioning tool
 441         size_t ownLen = 1;
 442         uint32_t outLen = 0;
 443
 444         char base64Buff[B64ENCODE_OUT_SAFESIZE(sizeof(ownerPSK)) + 1] = {};
 445         B64Result b64Ret = b64Encode(ownerPSK, sizeof(ownerPSK), base64Buff, sizeof(base64Buff),
 446                 &outLen);
 447         VERIFY_SUCCESS(TAG, B64_OK == b64Ret, ERROR);
 448
 449         OicSecCred_t *cred = GenerateCredential(&selectedDeviceInfo->doxm->deviceID,
 450                 SYMMETRIC_PAIR_WISE_KEY, NULL,
 451                 base64Buff, ownLen, &ptDeviceID);
 452         VERIFY_NON_NULL(TAG, cred, ERROR);
 453
 454         res = AddCredential(cred);
 455         if(res != OC_STACK_OK)
 456         {
 457             DeleteCredList(cred);
 458             return res;
 459         }
 460     }
 461     else
 462     {
 463         OIC_LOG(ERROR, TAG, "CAGenerateOwnerPSK failed");
 464     }
 465
 466     OIC_LOG(DEBUG, TAG, "OUT SaveOwnerPSK");
 467 exit:
 468     return res;
 469 }
 470
 471 /**
 472  * Callback handler for OwnerShipTransferModeHandler API.
 473  *
 474  * @param[in] ctx             ctx value passed to callback from calling function.
 475  * @param[in] UNUSED          handle to an invocation
 476  * @param[in] clientResponse  Response from queries to remote servers.
 477  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 478  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 479  */
 480 static OCStackApplicationResult OwnerTransferModeHandler(void *ctx, OCDoHandle UNUSED,
 481                                                          OCClientResponse *clientResponse)
 482 {
 483     OIC_LOG(DEBUG, TAG, "IN OwnerTransferModeHandler");
 484
 485     VERIFY_NON_NULL(TAG, clientResponse, WARNING);
 486     VERIFY_NON_NULL(TAG, ctx, WARNING);
 487
 488     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
 489     (void)UNUSED;
 490     if(clientResponse->result == OC_STACK_OK)
 491     {
 492         OIC_LOG(INFO, TAG, "OwnerTransferModeHandler : response result = OC_STACK_OK");
 493         //Send request : GET /oic/sec/pstat
 494         OCStackResult res = GetProvisioningStatusResource(otmCtx);
 495         if(OC_STACK_OK != res)
 496         {
 497             OIC_LOG(WARNING, TAG, "Failed to get pstat information");
 498             SetResult(otmCtx, res);
 499         }
 500     }
 501     else
 502     {
 503         OIC_LOG_V(WARNING, TAG, "OwnerTransferModeHandler : Client response is incorrect : %d",
 504         clientResponse->result);
 505         SetResult(otmCtx, clientResponse->result);
 506     }
 507
 508     OIC_LOG(DEBUG, TAG, "OUT OwnerTransferModeHandler");
 509
 510 exit:
 511     return  OC_STACK_DELETE_TRANSACTION;
 512 }
 513
 514 /**
 515  * Callback handler for ProvisioningStatusResouceHandler API.
 516  *
 517  * @param[in] ctx             ctx value passed to callback from calling function.
 518  * @param[in] UNUSED          handle to an invocation
 519  * @param[in] clientResponse  Response from queries to remote servers.
 520  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 521  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 522  */
 523 static OCStackApplicationResult ListMethodsHandler(void *ctx, OCDoHandle UNUSED,
 524                                                     OCClientResponse *clientResponse)
 525 {
 526     OIC_LOG(DEBUG, TAG, "IN ListMethodsHandler");
 527
 528     VERIFY_NON_NULL(TAG, clientResponse, WARNING);
 529     VERIFY_NON_NULL(TAG, ctx, WARNING);
 530
 531     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
 532     (void)UNUSED;
 533     if  (OC_STACK_OK == clientResponse->result)
 534     {
 535         if  (NULL == clientResponse->payload)
 536         {
 537             OIC_LOG(INFO, TAG, "Skiping Null payload");
 538             SetResult(otmCtx, OC_STACK_ERROR);
 539             return OC_STACK_DELETE_TRANSACTION;
 540         }
 541
 542         if (PAYLOAD_TYPE_SECURITY != clientResponse->payload->type)
 543         {
 544             OIC_LOG(INFO, TAG, "Unknown payload type");
 545             SetResult(otmCtx, OC_STACK_ERROR);
 546             return OC_STACK_DELETE_TRANSACTION;
 547         }
 548
 549         OicSecPstat_t* pstat = JSONToPstatBin(
 550                 ((OCSecurityPayload*)clientResponse->payload)->securityData);
 551         if(NULL == pstat)
 552         {
 553             OIC_LOG(ERROR, TAG, "Error while converting json to pstat bin");
 554             SetResult(otmCtx, OC_STACK_ERROR);
 555             return OC_STACK_DELETE_TRANSACTION;
 556         }
 557         otmCtx->selectedDeviceInfo->pstat = pstat;
 558
 559         //Select operation mode (Currently supported SINGLE_SERVICE_CLIENT_DRIVEN only)
 560         SelectOperationMode(otmCtx->selectedDeviceInfo, &(otmCtx->selectedDeviceInfo->pstat->om));
 561
 562         //Send request : PUT /oic/sec/pstat [{"om":"bx11", .. }]
 563         OCStackResult res = PutUpdateOperationMode(otmCtx);
 564         if (OC_STACK_OK != res)
 565         {
 566             OIC_LOG(ERROR, TAG, "Error while updating operation mode.");
 567             SetResult(otmCtx, res);
 568         }
 569     }
 570     else
 571     {
 572         OIC_LOG_V(WARNING, TAG, "ListMethodsHandler : Client response is incorrect : %d",
 573             clientResponse->result);
 574         SetResult(otmCtx, clientResponse->result);
 575     }
 576
 577     OIC_LOG(DEBUG, TAG, "OUT ListMethodsHandler");
 578 exit:
 579     return  OC_STACK_DELETE_TRANSACTION;
 580 }
 581
 582 /**
 583  * Response handler for update owner uuid request.
 584  *
 585  * @param[in] ctx             ctx value passed to callback from calling function.
 586  * @param[in] UNUSED          handle to an invocation
 587  * @param[in] clientResponse  Response from queries to remote servers.
 588  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 589  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 590  */
 591 static OCStackApplicationResult OwnerUuidUpdateHandler(void *ctx, OCDoHandle UNUSED,
 592                                 OCClientResponse *clientResponse)
 593 {
 594     VERIFY_NON_NULL(TAG, clientResponse, WARNING);
 595     VERIFY_NON_NULL(TAG, ctx, WARNING);
 596
 597     OIC_LOG(DEBUG, TAG, "IN OwnerUuidUpdateHandler");
 598     (void)UNUSED;
 599     OCStackResult res = OC_STACK_OK;
 600     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
 601
 602     if(OC_STACK_OK == clientResponse->result)
 603     {
 604         if(otmCtx && otmCtx->selectedDeviceInfo)
 605         {
 606             res = SaveOwnerPSK(otmCtx->selectedDeviceInfo);
 607             if(OC_STACK_OK != res)
 608             {
 609                 OIC_LOG(ERROR, TAG, "OwnerUuidUpdateHandler:Failed to owner PSK generation");
 610                 SetResult(otmCtx, res);
 611                 return OC_STACK_DELETE_TRANSACTION;
 612             }
 613
 614             //PUT owner credential to new device according to security spec B.
 615             res = PutOwnerCredential(otmCtx);
 616             if(OC_STACK_OK != res)
 617             {
 618                 OIC_LOG(ERROR, TAG,
 619                         "OwnerUuidUpdateHandler:Failed to send PUT request for onwer credential");
 620                 SetResult(otmCtx, res);
 621                 return OC_STACK_DELETE_TRANSACTION;
 622             }
 623         }
 624     }
 625     else
 626     {
 627         res = clientResponse->result;
 628         OIC_LOG_V(ERROR, TAG, "OwnerUuidHandler : Unexpected result %d", res);
 629         SetResult(otmCtx, res);
 630     }
 631
 632     OIC_LOG(DEBUG, TAG, "OUT OwnerUuidUpdateHandler");
 633
 634 exit:
 635     return  OC_STACK_DELETE_TRANSACTION;
 636 }
 637
 638 /**
 639  * Response handler for update operation mode.
 640  *
 641  * @param[in] ctx             ctx value passed to callback from calling function.
 642  * @param[in] UNUSED          handle to an invocation
 643  * @param[in] clientResponse  Response from queries to remote servers.
 644  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 645  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 646  */
 647 static OCStackApplicationResult OperationModeUpdateHandler(void *ctx, OCDoHandle UNUSED,
 648                                 OCClientResponse *clientResponse)
 649 {
 650     OIC_LOG(DEBUG, TAG, "IN OperationModeUpdateHandler");
 651
 652     VERIFY_NON_NULL(TAG, clientResponse, WARNING);
 653     VERIFY_NON_NULL(TAG, ctx, WARNING);
 654
 655     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
 656     (void) UNUSED;
 657     if  (OC_STACK_OK == clientResponse->result)
 658     {
 659         OCStackResult res = OC_STACK_ERROR;
 660         OicSecOxm_t selOxm = otmCtx->selectedDeviceInfo->doxm->oxmSel;
 661         //DTLS Handshake
 662         //Load secret for temporal secure session.
 663         if(g_OTMDatas[selOxm].loadSecretCB)
 664         {
 665             res = g_OTMDatas[selOxm].loadSecretCB(otmCtx);
 666             if(OC_STACK_OK != res)
 667             {
 668                 OIC_LOG(ERROR, TAG, "OperationModeUpdate : Failed to load secret");
 669                 SetResult(otmCtx, res);
 670                 return  OC_STACK_DELETE_TRANSACTION;
 671             }
 672         }
 673
 674         //It will be used in handshake event handler
 675         g_otmCtx = otmCtx;
 676
 677         //Try DTLS handshake to generate secure session
 678         if(g_OTMDatas[selOxm].createSecureSessionCB)
 679         {
 680             res = g_OTMDatas[selOxm].createSecureSessionCB(otmCtx);
 681             if(OC_STACK_OK != res)
 682             {
 683                 OIC_LOG(ERROR, TAG, "OperationModeUpdate : Failed to create DTLS session");
 684                 SetResult(otmCtx, res);
 685                 return OC_STACK_DELETE_TRANSACTION;
 686             }
 687         }
 688     }
 689     else
 690     {
 691         OIC_LOG(ERROR, TAG, "Error while update operation mode");
 692         SetResult(otmCtx, clientResponse->result);
 693     }
 694
 695     OIC_LOG(DEBUG, TAG, "OUT OperationModeUpdateHandler");
 696
 697 exit:
 698     return  OC_STACK_DELETE_TRANSACTION;
 699 }
 700
 701 /**
 702  * Response handler for update owner crendetial request.
 703  *
 704  * @param[in] ctx             ctx value passed to callback from calling function.
 705  * @param[in] UNUSED          handle to an invocation
 706  * @param[in] clientResponse  Response from queries to remote servers.
 707  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 708  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 709  */
 710 static OCStackApplicationResult OwnerCredentialHandler(void *ctx, OCDoHandle UNUSED,
 711                                 OCClientResponse *clientResponse)
 712 {
 713     VERIFY_NON_NULL(TAG, clientResponse, WARNING);
 714     VERIFY_NON_NULL(TAG, ctx, WARNING);
 715
 716     OIC_LOG(DEBUG, TAG, "IN OwnerCredentialHandler");
 717     (void)UNUSED;
 718     OCStackResult res = OC_STACK_OK;
 719     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
 720
 721     if(OC_STACK_RESOURCE_CREATED == clientResponse->result)
 722     {
 723         if(otmCtx && otmCtx->selectedDeviceInfo)
 724         {
 725             //Close the temporal secure session to verify the owner credential
 726             CAEndpoint_t* endpoint = (CAEndpoint_t *)&otmCtx->selectedDeviceInfo->endpoint;
 727             endpoint->port = otmCtx->selectedDeviceInfo->securePort;
 728             CAResult_t caResult = CACloseDtlsSession(endpoint);
 729             if(CA_STATUS_OK != caResult)
 730             {
 731                 OIC_LOG(ERROR, TAG, "Failed to close DTLS session");
 732                 SetResult(otmCtx, caResult);
 733                 return OC_STACK_DELETE_TRANSACTION;
 734             }
 735
 736             /**
 737              * If we select NULL cipher,
 738              * client will select appropriate cipher suite according to server's cipher-suite list.
 739              */
 740             caResult = CASelectCipherSuite(TLS_NULL_WITH_NULL_NULL);
 741             if(CA_STATUS_OK != caResult)
 742             {
 743                 OIC_LOG(ERROR, TAG, "Failed to select TLS_NULL_WITH_NULL_NULL");
 744                 SetResult(otmCtx, caResult);
 745                 return OC_STACK_DELETE_TRANSACTION;
 746             }
 747
 748             /**
 749              * in case of random PIN based OxM,
 750              * revert get_psk_info callback of tinyDTLS to use owner credential.
 751              */
 752             if(OIC_RANDOM_DEVICE_PIN == otmCtx->selectedDeviceInfo->doxm->oxmSel)
 753             {
 754                 OicUuid_t emptyUuid = { .id={0}};
 755                 SetUuidForRandomPinOxm(&emptyUuid);
 756
 757                 if(CA_STATUS_OK != CARegisterDTLSCredentialsHandler(GetDtlsPskCredentials))
 758                 {
 759                     OIC_LOG(ERROR, TAG, "Failed to revert DTLS credential handler.");
 760                     SetResult(otmCtx, OC_STACK_INVALID_CALLBACK);
 761                     return OC_STACK_DELETE_TRANSACTION;
 762                 }
 763             }
 764
 765             //PUT /oic/sec/doxm [{ ..., "owned":"TRUE" }]
 766             res = PutOwnershipInformation(otmCtx);
 767             if(OC_STACK_OK != res)
 768             {
 769                 OIC_LOG(ERROR, TAG, "Failed to put ownership information to new device");
 770                 SetResult(otmCtx, res);
 771                 return OC_STACK_DELETE_TRANSACTION;
 772             }
 773         }
 774     }
 775     else
 776     {
 777         res = clientResponse->result;
 778         OIC_LOG_V(ERROR, TAG, "OwnerCredentialHandler : Unexpected result %d", res);
 779         SetResult(otmCtx, res);
 780     }
 781
 782     OIC_LOG(DEBUG, TAG, "OUT OwnerCredentialHandler");
 783
 784 exit:
 785     return  OC_STACK_DELETE_TRANSACTION;
 786 }
 787
 788
 789 /**
 790  * Response handler for update owner information request.
 791  *
 792  * @param[in] ctx             ctx value passed to callback from calling function.
 793  * @param[in] UNUSED          handle to an invocation
 794  * @param[in] clientResponse  Response from queries to remote servers.
 795  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 796  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 797  */
 798 static OCStackApplicationResult OwnershipInformationHandler(void *ctx, OCDoHandle UNUSED,
 799                                 OCClientResponse *clientResponse)
 800 {
 801     VERIFY_NON_NULL(TAG, clientResponse, WARNING);
 802     VERIFY_NON_NULL(TAG, ctx, WARNING);
 803
 804     OIC_LOG(DEBUG, TAG, "IN OwnershipInformationHandler");
 805     (void)UNUSED;
 806     OCStackResult res = OC_STACK_OK;
 807     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
 808
 809     if(OC_STACK_OK == clientResponse->result)
 810     {
 811         if(otmCtx && otmCtx->selectedDeviceInfo)
 812         {
 813             OIC_LOG(INFO, TAG, "Ownership transfer was successfully completed.");
 814             OIC_LOG(INFO, TAG, "Start defualt ACL & commit-hash provisioning.");
 815
 816             res = PutProvisioningStatus(otmCtx);
 817             if(OC_STACK_OK != res)
 818             {
 819                 OIC_LOG(ERROR, TAG, "Failed to update pstat");
 820                 SetResult(otmCtx, res);
 821             }
 822         }
 823     }
 824     else
 825     {
 826         res = clientResponse->result;
 827         OIC_LOG_V(ERROR, TAG, "OwnershipInformationHandler : Unexpected result %d", res);
 828         SetResult(otmCtx, res);
 829     }
 830
 831     OIC_LOG(DEBUG, TAG, "OUT OwnershipInformationHandler");
 832
 833 exit:
 834     return  OC_STACK_DELETE_TRANSACTION;
 835 }
 836
 837 /**
 838  * Response handler of update provisioning status.
 839  *
 840  * @param[in] ctx             ctx value passed to callback from calling function.
 841  * @param[in] UNUSED          handle to an invocation
 842  * @param[in] clientResponse  Response from queries to remote servers.
 843  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 844  *          and OC_STACK_KEEP_TRANSACTION to keep it.
 845  */
 846 static OCStackApplicationResult ProvisioningStatusHandler(void *ctx, OCDoHandle UNUSED,
 847                                                        OCClientResponse *clientResponse)
 848 {
 849     OIC_LOG_V(INFO, TAG, "IN ProvisioningStatusHandler.");
 850
 851     VERIFY_NON_NULL(TAG, clientResponse, ERROR);
 852     VERIFY_NON_NULL(TAG, ctx, ERROR);
 853
 854     OTMContext_t* otmCtx = (OTMContext_t*) ctx;
 855     (void)UNUSED;
 856
 857     if (OC_STACK_OK == clientResponse->result)
 858     {
 859         OCStackResult res = PDMAddDevice(&otmCtx->selectedDeviceInfo->doxm->deviceID);
 860          if (OC_STACK_OK == res)
 861          {
 862                 OIC_LOG_V(INFO, TAG, "Add device's UUID in PDM_DB");
 863                 SetResult(otmCtx, OC_STACK_OK);
 864                 return OC_STACK_DELETE_TRANSACTION;
 865          }
 866           else
 867          {
 868               OIC_LOG(ERROR, TAG, "Ownership transfer is complete but adding information to DB is failed.");
 869          }
 870     }
 871     else
 872     {
 873         OIC_LOG_V(INFO, TAG, "Error occured in provisionDefaultACLCB :: %d\n",
 874                             clientResponse->result);
 875         SetResult(otmCtx, clientResponse->result);
 876     }
 877
 878
 879 exit:
 880     OIC_LOG_V(INFO, TAG, "OUT ProvisioningStatusHandler.");
 881     return OC_STACK_DELETE_TRANSACTION;
 882 }
 883
 884 static OCStackResult PutOwnerCredential(OTMContext_t* otmCtx)
 885 {
 886     OIC_LOG(DEBUG, TAG, "IN PutOwnerCredential");
 887
 888     if(!otmCtx || !otmCtx->selectedDeviceInfo)
 889     {
 890         OIC_LOG(ERROR, TAG, "Invalid parameters");
 891         return OC_STACK_INVALID_PARAM;
 892     }
 893
 894     OCProvisionDev_t* deviceInfo = otmCtx->selectedDeviceInfo;
 895     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
 896
 897     if(!PMGenerateQuery(true,
 898                         deviceInfo->endpoint.addr, deviceInfo->securePort,
 899                         deviceInfo->connType,
 900                         query, sizeof(query), OIC_RSRC_CRED_URI))
 901     {
 902         OIC_LOG(ERROR, TAG, "PutOwnerCredential : Failed to generate query");
 903         return OC_STACK_ERROR;
 904     }
 905     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
 906     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
 907     if(!secPayload)
 908     {
 909         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
 910         return OC_STACK_NO_MEMORY;
 911     }
 912
 913     //Generate owner credential for new device
 914     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
 915     OicSecCred_t* ownerCredential =
 916         GetCredResourceData(&(deviceInfo->doxm->deviceID));
 917     if(!ownerCredential)
 918     {
 919         OIC_LOG(ERROR, TAG, "Can not find OwnerPSK.");
 920         return OC_STACK_NO_RESOURCE;
 921     }
 922
 923     OicUuid_t credSubjectId = {.id={0}};
 924     if(OC_STACK_OK == GetDoxmDeviceID(&credSubjectId))
 925     {
 926         OicSecCred_t newCredential;
 927         memcpy(&newCredential, ownerCredential, sizeof(OicSecCred_t));
 928         newCredential.next = NULL;
 929
 930         //Set subject ID as PT's ID
 931         memcpy(&(newCredential.subject), &credSubjectId, sizeof(OicUuid_t));
 932
 933         //Fill private data as empty string
 934         newCredential.privateData.data = NULL;
 935
 936         //Send owner credential to new device : PUT /oic/sec/cred [ owner credential ]
 937         secPayload->securityData = BinToCredJSON(&newCredential);
 938         if (NULL == secPayload->securityData)
 939         {
 940             OICFree(secPayload);
 941             OIC_LOG(ERROR, TAG, "Error while converting bin to json");
 942             return OC_STACK_ERROR;
 943         }
 944         OIC_LOG_V(DEBUG, TAG, "Payload : %s", secPayload->securityData);
 945
 946         OCCallbackData cbData;
 947         cbData.cb = &OwnerCredentialHandler;
 948         cbData.context = (void *)otmCtx;
 949         cbData.cd = NULL;
 950         OCStackResult res = OCDoResource(NULL, OC_REST_PUT, query,
 951                                          &deviceInfo->endpoint, (OCPayload*)secPayload,
 952                                          deviceInfo->connType, OC_LOW_QOS, &cbData, NULL, 0);
 953         if (res != OC_STACK_OK)
 954         {
 955             OIC_LOG(ERROR, TAG, "OCStack resource error");
 956         }
 957     }
 958     else
 959     {
 960         OIC_LOG(ERROR, TAG, "Failed to read DOXM device ID.");
 961         return OC_STACK_NO_RESOURCE;
 962     }
 963
 964     OIC_LOG(DEBUG, TAG, "OUT PutOwnerCredential");
 965
 966     return OC_STACK_OK;
 967 }
 968
 969 static OCStackResult PutOwnerTransferModeToResource(OTMContext_t* otmCtx)
 970 {
 971     OIC_LOG(DEBUG, TAG, "IN PutOwnerTransferModeToResource");
 972
 973     if(!otmCtx || !otmCtx->selectedDeviceInfo)
 974     {
 975         OIC_LOG(ERROR, TAG, "Invalid parameters");
 976         return OC_STACK_INVALID_PARAM;
 977     }
 978
 979     OCProvisionDev_t* deviceInfo = otmCtx->selectedDeviceInfo;
 980     OicSecOxm_t selectedOxm = deviceInfo->doxm->oxmSel;
 981     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
 982
 983     if(!PMGenerateQuery(false,
 984                         deviceInfo->endpoint.addr, deviceInfo->endpoint.port,
 985                         deviceInfo->connType,
 986                         query, sizeof(query), OIC_RSRC_DOXM_URI))
 987     {
 988         OIC_LOG(ERROR, TAG, "PutOwnerTransferModeToResource : Failed to generate query");
 989         return OC_STACK_ERROR;
 990     }
 991     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
 992     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
 993     if(!secPayload)
 994     {
 995         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
 996         return OC_STACK_NO_MEMORY;
 997     }
 998     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
 999     secPayload->securityData = g_OTMDatas[selectedOxm].createSelectOxmPayloadCB(otmCtx);
1000     if (NULL == secPayload->securityData)
1001     {
1002         OICFree(secPayload);
1003         OIC_LOG(ERROR, TAG, "Error while converting bin to json");
1004         return OC_STACK_ERROR;
1005     }
1006
1007     OCCallbackData cbData;
1008     cbData.cb = &OwnerTransferModeHandler;
1009     cbData.context = (void *)otmCtx;
1010     cbData.cd = NULL;
1011     OCStackResult res = OCDoResource(NULL, OC_REST_PUT, query,
1012                                      &deviceInfo->endpoint, (OCPayload*)secPayload,
1013                                      deviceInfo->connType, OC_LOW_QOS, &cbData, NULL, 0);
1014     if (res != OC_STACK_OK)
1015     {
1016         OIC_LOG(ERROR, TAG, "OCStack resource error");
1017     }
1018
1019     OIC_LOG(DEBUG, TAG, "OUT PutOwnerTransferModeToResource");
1020
1021     return res;
1022 }
1023
1024 static OCStackResult GetProvisioningStatusResource(OTMContext_t* otmCtx)
1025 {
1026     OIC_LOG(DEBUG, TAG, "IN GetProvisioningStatusResource");
1027
1028     if(!otmCtx || !otmCtx->selectedDeviceInfo)
1029     {
1030         OIC_LOG(ERROR, TAG, "Invailed parameters");
1031         return OC_STACK_INVALID_PARAM;
1032     }
1033
1034     OCProvisionDev_t* deviceInfo = otmCtx->selectedDeviceInfo;
1035     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1036     if(!PMGenerateQuery(false,
1037                         deviceInfo->endpoint.addr, deviceInfo->endpoint.port,
1038                         deviceInfo->connType,
1039                         query, sizeof(query), OIC_RSRC_PSTAT_URI))
1040     {
1041         OIC_LOG(ERROR, TAG, "GetProvisioningStatusResource : Failed to generate query");
1042         return OC_STACK_ERROR;
1043     }
1044     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1045
1046     OCCallbackData cbData;
1047     cbData.cb = &ListMethodsHandler;
1048     cbData.context = (void *)otmCtx;
1049     cbData.cd = NULL;
1050     OCStackResult res = OCDoResource(NULL, OC_REST_GET, query, NULL, NULL,
1051                                      deviceInfo->connType, OC_LOW_QOS, &cbData, NULL, 0);
1052     if (res != OC_STACK_OK)
1053     {
1054         OIC_LOG(ERROR, TAG, "OCStack resource error");
1055     }
1056
1057     OIC_LOG(DEBUG, TAG, "OUT GetProvisioningStatusResource");
1058
1059     return res;
1060 }
1061
1062 static OCStackResult PutOwnerUuid(OTMContext_t* otmCtx)
1063 {
1064     OIC_LOG(DEBUG, TAG, "IN PutOwnerUuid");
1065
1066     if(!otmCtx || !otmCtx->selectedDeviceInfo)
1067     {
1068         OIC_LOG(ERROR, TAG, "Invailed parameters");
1069         return OC_STACK_INVALID_PARAM;
1070     }
1071
1072     OCProvisionDev_t* deviceInfo = otmCtx->selectedDeviceInfo;
1073     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1074     if(!PMGenerateQuery(true,
1075                         deviceInfo->endpoint.addr, deviceInfo->securePort,
1076                         deviceInfo->connType,
1077                         query, sizeof(query), OIC_RSRC_DOXM_URI))
1078     {
1079         OIC_LOG(ERROR, TAG, "PutOwnershipInformation : Failed to generate query");
1080         return OC_STACK_ERROR;
1081     }
1082     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1083
1084     //PUT PT's uuid to new device
1085     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
1086     if(!secPayload)
1087     {
1088         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
1089         return OC_STACK_NO_MEMORY;
1090     }
1091     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
1092     secPayload->securityData =
1093         g_OTMDatas[deviceInfo->doxm->oxmSel].createOwnerTransferPayloadCB(otmCtx);
1094     if (NULL == secPayload->securityData)
1095     {
1096         OICFree(secPayload);
1097         OIC_LOG(ERROR, TAG, "Error while converting doxm bin to json");
1098         return OC_STACK_INVALID_PARAM;
1099     }
1100     OIC_LOG_V(DEBUG, TAG, "Payload : %s", secPayload->securityData);
1101
1102     OCCallbackData cbData;
1103     cbData.cb = &OwnerUuidUpdateHandler;
1104     cbData.context = (void *)otmCtx;
1105     cbData.cd = NULL;
1106
1107     OCStackResult res = OCDoResource(NULL, OC_REST_PUT, query, 0, (OCPayload*)secPayload,
1108                                      deviceInfo->connType, OC_LOW_QOS, &cbData, NULL, 0);
1109     if (res != OC_STACK_OK)
1110     {
1111         OIC_LOG(ERROR, TAG, "OCStack resource error");
1112     }
1113
1114     OIC_LOG(DEBUG, TAG, "OUT PutOwnerUuid");
1115
1116     return res;
1117 }
1118
1119 static OCStackResult PutOwnershipInformation(OTMContext_t* otmCtx)
1120 {
1121     OIC_LOG(DEBUG, TAG, "IN PutOwnershipInformation");
1122
1123     if(!otmCtx || !otmCtx->selectedDeviceInfo)
1124     {
1125         OIC_LOG(ERROR, TAG, "Invailed parameters");
1126         return OC_STACK_INVALID_PARAM;
1127     }
1128
1129     OCProvisionDev_t* deviceInfo = otmCtx->selectedDeviceInfo;
1130     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1131     if(!PMGenerateQuery(true,
1132                         deviceInfo->endpoint.addr, deviceInfo->securePort,
1133                         deviceInfo->connType,
1134                         query, sizeof(query), OIC_RSRC_DOXM_URI))
1135     {
1136         OIC_LOG(ERROR, TAG, "PutOwnershipInformation : Failed to generate query");
1137         return OC_STACK_ERROR;
1138     }
1139     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1140
1141     //OwnershipInformationHandler
1142     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
1143     if(!secPayload)
1144     {
1145         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
1146         return OC_STACK_NO_MEMORY;
1147     }
1148
1149     otmCtx->selectedDeviceInfo->doxm->owned = true;
1150     secPayload->securityData = BinToDoxmJSON(otmCtx->selectedDeviceInfo->doxm);
1151     if (NULL == secPayload->securityData)
1152     {
1153         OICFree(secPayload);
1154         OIC_LOG(ERROR, TAG, "Error while converting doxm bin to json");
1155         return OC_STACK_INVALID_PARAM;
1156     }
1157     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
1158
1159     OCCallbackData cbData;
1160     cbData.cb = &OwnershipInformationHandler;
1161     cbData.context = (void *)otmCtx;
1162     cbData.cd = NULL;
1163
1164     OCStackResult res = OCDoResource(NULL, OC_REST_PUT, query, 0, (OCPayload*)secPayload,
1165                                      deviceInfo->connType, OC_LOW_QOS, &cbData, NULL, 0);
1166     if (res != OC_STACK_OK)
1167     {
1168         OIC_LOG(ERROR, TAG, "OCStack resource error");
1169     }
1170
1171     OIC_LOG(DEBUG, TAG, "OUT PutOwnershipInformation");
1172
1173     return res;
1174 }
1175
1176 static OCStackResult PutUpdateOperationMode(OTMContext_t* otmCtx)
1177 {
1178     OIC_LOG(DEBUG, TAG, "IN PutUpdateOperationMode");
1179
1180     if(!otmCtx || !otmCtx->selectedDeviceInfo)
1181     {
1182         return OC_STACK_INVALID_PARAM;
1183     }
1184
1185     OCProvisionDev_t* deviceInfo = otmCtx->selectedDeviceInfo;
1186     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1187     if(!PMGenerateQuery(false,
1188                         deviceInfo->endpoint.addr, deviceInfo->endpoint.port,
1189                         deviceInfo->connType,
1190                         query, sizeof(query), OIC_RSRC_PSTAT_URI))
1191     {
1192         OIC_LOG(ERROR, TAG, "PutUpdateOperationMode : Failed to generate query");
1193         return OC_STACK_ERROR;
1194     }
1195     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1196
1197     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
1198     if(!secPayload)
1199     {
1200         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
1201         return OC_STACK_NO_MEMORY;
1202     }
1203     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
1204     secPayload->securityData = BinToPstatJSON(deviceInfo->pstat);
1205     if (NULL == secPayload->securityData)
1206     {
1207         OICFree(secPayload);
1208         OIC_LOG(ERROR, TAG, "Error while converting pstat bin to json");
1209         return OC_STACK_INVALID_PARAM;
1210     }
1211
1212     OCCallbackData cbData;
1213     cbData.cb = &OperationModeUpdateHandler;
1214     cbData.context = (void *)otmCtx;
1215     cbData.cd = NULL;
1216     OCStackResult res = OCDoResource(NULL, OC_REST_PUT, query, 0, (OCPayload*)secPayload,
1217                                      deviceInfo->connType, OC_LOW_QOS, &cbData, NULL, 0);
1218     if (res != OC_STACK_OK)
1219     {
1220         OIC_LOG(ERROR, TAG, "OCStack resource error");
1221     }
1222
1223     OIC_LOG(DEBUG, TAG, "OUT PutUpdateOperationMode");
1224
1225     return res;
1226 }
1227
1228 static OCStackResult StartOwnershipTransfer(void* ctx, OCProvisionDev_t* selectedDevice)
1229 {
1230     OIC_LOG(INFO, TAG, "IN StartOwnershipTransfer");
1231     OTMContext_t* otmCtx = (OTMContext_t*)ctx;
1232     otmCtx->selectedDeviceInfo = selectedDevice;
1233
1234     //Set to the lowest level OxM, and then find more higher level OxM.
1235     OCStackResult res = SelectProvisioningMethod(selectedDevice->doxm->oxm,
1236                                                  selectedDevice->doxm->oxmLen,
1237                                                  &selectedDevice->doxm->oxmSel);
1238     if(OC_STACK_OK != res)
1239     {
1240         OIC_LOG(ERROR, TAG, "Failed to select the provisioning method");
1241         SetResult(otmCtx, res);
1242         return res;
1243     }
1244     OIC_LOG_V(DEBUG, TAG, "Selected provisoning method = %d", selectedDevice->doxm->oxmSel);
1245
1246     //Send Req: PUT /oic/sec/doxm [{..."OxmSel" :g_OTMDatas[Index of Selected OxM].OXMString,...}]
1247     res = PutOwnerTransferModeToResource(otmCtx);
1248     if(OC_STACK_OK != res)
1249     {
1250         OIC_LOG(WARNING, TAG, "Failed to select the provisioning method");
1251         SetResult(otmCtx, res);
1252         return res;
1253     }
1254
1255     //Register DTLS event handler to catch the dtls event while handshake
1256     if(CA_STATUS_OK != CARegisterDTLSHandshakeCallback(DTLSHandshakeCB))
1257     {
1258         OIC_LOG(WARNING, TAG, "StartOwnershipTransfer : Failed to register DTLS handshake callback.");
1259     }
1260
1261     OIC_LOG(INFO, TAG, "OUT StartOwnershipTransfer");
1262
1263     return res;
1264
1265 }
1266
1267 OCStackResult OTMSetOwnershipTransferCallbackData(OicSecOxm_t oxmType, OTMCallbackData_t* data)
1268 {
1269     OIC_LOG(DEBUG, TAG, "IN OTMSetOwnerTransferCallbackData");
1270
1271     if(!data)
1272     {
1273         OIC_LOG(ERROR, TAG, "OTMSetOwnershipTransferCallbackData : Invalid parameters");
1274         return OC_STACK_INVALID_PARAM;
1275     }
1276     if(oxmType >= OIC_OXM_COUNT)
1277     {
1278         OIC_LOG(INFO, TAG, "Unknow ownership transfer method");
1279         return OC_STACK_INVALID_PARAM;
1280     }
1281
1282     g_OTMDatas[oxmType].loadSecretCB= data->loadSecretCB;
1283     g_OTMDatas[oxmType].createSecureSessionCB = data->createSecureSessionCB;
1284     g_OTMDatas[oxmType].createSelectOxmPayloadCB = data->createSelectOxmPayloadCB;
1285     g_OTMDatas[oxmType].createOwnerTransferPayloadCB = data->createOwnerTransferPayloadCB;
1286
1287     OIC_LOG(DEBUG, TAG, "OUT OTMSetOwnerTransferCallbackData");
1288
1289     return OC_STACK_OK;
1290 }
1291
1292 /**
1293  * NOTE : Unowned discovery should be done before performing OTMDoOwnershipTransfer
1294  */
1295 OCStackResult OTMDoOwnershipTransfer(void* ctx,
1296                                      OCProvisionDev_t *selectedDevicelist,
1297                                      OCProvisionResultCB resultCallback)
1298 {
1299     OIC_LOG(DEBUG, TAG, "IN OTMDoOwnershipTransfer");
1300
1301     if (NULL == selectedDevicelist)
1302     {
1303         return OC_STACK_INVALID_PARAM;
1304     }
1305     if (NULL == resultCallback)
1306     {
1307         return OC_STACK_INVALID_CALLBACK;
1308     }
1309
1310     OTMContext_t* otmCtx = (OTMContext_t*)OICCalloc(1,sizeof(OTMContext_t));
1311     if(!otmCtx)
1312     {
1313         OIC_LOG(ERROR, TAG, "Failed to create OTM Context");
1314         return OC_STACK_NO_MEMORY;
1315     }
1316     otmCtx->ctxResultCallback = resultCallback;
1317     otmCtx->ctxHasError = false;
1318     otmCtx->userCtx = ctx;
1319     OCProvisionDev_t* pCurDev = selectedDevicelist;
1320
1321     //Counting number of selected devices.
1322     otmCtx->ctxResultArraySize = 0;
1323     while(NULL != pCurDev)
1324     {
1325         otmCtx->ctxResultArraySize++;
1326         pCurDev = pCurDev->next;
1327     }
1328
1329     otmCtx->ctxResultArray =
1330         (OCProvisionResult_t*)OICCalloc(otmCtx->ctxResultArraySize, sizeof(OCProvisionResult_t));
1331     if(NULL == otmCtx->ctxResultArray)
1332     {
1333         OIC_LOG(ERROR, TAG, "OTMDoOwnershipTransfer : Failed to memory allocation");
1334         OICFree(otmCtx);
1335         return OC_STACK_NO_MEMORY;
1336     }
1337     pCurDev = selectedDevicelist;
1338
1339     OCStackResult res = OC_STACK_OK;
1340     //Fill the device UUID for result array.
1341     for(size_t devIdx = 0; devIdx < otmCtx->ctxResultArraySize; devIdx++)
1342     {
1343         //Checking duplication of Device ID.
1344         bool isDuplicate = true;
1345         res = PDMIsDuplicateDevice(&pCurDev->doxm->deviceID, &isDuplicate);
1346         if (OC_STACK_OK != res)
1347         {
1348             goto error;
1349         }
1350         if (isDuplicate)
1351         {
1352             OIC_LOG(ERROR, TAG, "OTMDoOwnershipTransfer : Device ID is duplicated");
1353             res = OC_STACK_INVALID_PARAM;
1354             goto error;
1355         }
1356         memcpy(otmCtx->ctxResultArray[devIdx].deviceId.id,
1357                pCurDev->doxm->deviceID.id,
1358                UUID_LENGTH);
1359         otmCtx->ctxResultArray[devIdx].res = OC_STACK_CONTINUE;
1360         pCurDev = pCurDev->next;
1361     }
1362
1363     StartOwnershipTransfer(otmCtx, selectedDevicelist);
1364
1365     OIC_LOG(DEBUG, TAG, "OUT OTMDoOwnershipTransfer");
1366     return OC_STACK_OK;
1367
1368 error:
1369     OICFree(otmCtx->ctxResultArray);
1370     OICFree(otmCtx);
1371     return res;
1372
1373 }
1374
1375 OCStackResult PutProvisioningStatus(OTMContext_t* otmCtx)
1376 {
1377     OIC_LOG(INFO, TAG, "IN PutProvisioningStatus");
1378
1379     if(!otmCtx)
1380     {
1381         OIC_LOG(ERROR, TAG, "OTMContext is NULL");
1382         return OC_STACK_INVALID_PARAM;
1383     }
1384     if(!otmCtx->selectedDeviceInfo)
1385     {
1386         OIC_LOG(ERROR, TAG, "Can't find device information in OTMContext");
1387         OICFree(otmCtx);
1388         return OC_STACK_INVALID_PARAM;
1389     }
1390
1391     otmCtx->selectedDeviceInfo->pstat->tm = NORMAL;
1392     otmCtx->selectedDeviceInfo->pstat->cm = PROVISION_ACLS | PROVISION_CREDENTIALS |
1393                                             SECURITY_MANAGEMENT_SERVICES | BOOTSTRAP_SERVICE;
1394     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
1395     if(!secPayload)
1396     {
1397         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
1398         return OC_STACK_NO_MEMORY;
1399     }
1400     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
1401     secPayload->securityData = BinToPstatJSON(otmCtx->selectedDeviceInfo->pstat);
1402     if (NULL == secPayload->securityData)
1403     {
1404         OICFree(secPayload);
1405         SetResult(otmCtx, OC_STACK_INVALID_JSON);
1406         return OC_STACK_INVALID_JSON;
1407     }
1408     OIC_LOG_V(INFO, TAG, "Created payload for commit hash: %s",secPayload->securityData);
1409
1410     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1411     if(!PMGenerateQuery(true,
1412                         otmCtx->selectedDeviceInfo->endpoint.addr,
1413                         otmCtx->selectedDeviceInfo->securePort,
1414                         otmCtx->selectedDeviceInfo->connType,
1415                         query, sizeof(query), OIC_RSRC_PSTAT_URI))
1416     {
1417         OIC_LOG(ERROR, TAG, "PutProvisioningStatus : Failed to generate query");
1418         return OC_STACK_ERROR;
1419     }
1420     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1421
1422     OCCallbackData cbData = {.context=NULL, .cb=NULL, .cd=NULL};
1423     cbData.cb = &ProvisioningStatusHandler;
1424     cbData.context = (void*)otmCtx;
1425     cbData.cd = NULL;
1426     OCStackResult ret = OCDoResource(NULL, OC_REST_PUT, query, 0, (OCPayload*)secPayload,
1427             otmCtx->selectedDeviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
1428     OIC_LOG_V(INFO, TAG, "OCDoResource returned: %d",ret);
1429     if (ret != OC_STACK_OK)
1430     {
1431         OIC_LOG(ERROR, TAG, "OCStack resource error");
1432         SetResult(otmCtx, ret);
1433     }
1434
1435     OIC_LOG(INFO, TAG, "OUT PutProvisioningStatus");
1436
1437     return ret;
1438 }