resource/csdk/security/provisioning/src/secureresourceprovider.c

   1 /* *****************************************************************
   2  *
   3  * Copyright 2015 Samsung Electronics All Rights Reserved.
   4  *
   5  *
   6  *
   7  * Licensed under the Apache License, Version 2.0 (the "License");
   8  * you may not use this file except in compliance with the License.
   9  * You may obtain a copy of the License at
  10  *
  11  *     http://www.apache.org/licenses/LICENSE-2.0
  12  *
  13  * Unless required by applicable law or agreed to in writing, software
  14  * distributed under the License is distributed on an "AS IS" BASIS,
  15  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  16  * See the License for the specific language governing permissions and
  17  * limitations under the License.
  18  *
  19  * *****************************************************************/
  20 #include <stdio.h>
  21 #include <string.h>
  22 #include <stdint.h>
  23 #ifdef HAVE_UNISTD_H
  24 #include <unistd.h>
  25 #endif
  26
  27 #include "ocprovisioningmanager.h"
  28 #include "secureresourceprovider.h"
  29 #include "logger.h"
  30 #include "oic_malloc.h"
  31 #include "aclresource.h"
  32 #include "pstatresource.h"
  33 #include "srmresourcestrings.h"
  34 #include "credresource.h"
  35 #include "doxmresource.h"
  36 #include "pconfresource.h"
  37 #include "credentialgenerator.h"
  38 #include "cainterface.h"
  39 #include "cJSON.h"
  40 #include "pmtypes.h"
  41 #include "pmutility.h"
  42 #include "provisioningdatabasemanager.h"
  43 #include "base64.h"
  44 #include "utlist.h"
  45 #include "ocpayload.h"
  46
  47 #ifdef __WITH_X509__
  48 #include "crlresource.h"
  49 #endif // WITH_X509__
  50
  51 #define TAG "SRPAPI"
  52
  53 /**
  54  * Macro to verify argument is not equal to NULL.
  55  * eg: VERIFY_NON_NULL(TAG, ptrData, ERROR,OC_STACK_ERROR);
  56  */
  57 #define VERIFY_NON_NULL(tag, arg, logLevel, retValue) { if (NULL == (arg)) \
  58             { OIC_LOG((logLevel), tag, #arg " is NULL"); return retValue; } }
  59
  60 /**
  61  * Macro to verify success of operation.
  62  * eg: VERIFY_SUCCESS(TAG, OC_STACK_OK == foo(), ERROR, OC_STACK_ERROR);
  63  */
  64 #define VERIFY_SUCCESS(tag, op, logLevel, retValue) { if (!(op)) \
  65             {OIC_LOG((logLevel), tag, #op " failed!!"); return retValue;} }
  66
  67 /**
  68  * Structure to carry credential data to callback.
  69  */
  70 typedef struct CredentialData CredentialData_t;
  71 struct CredentialData
  72 {
  73     void *ctx;                                  /**< Pointer to user context.**/
  74     const OCProvisionDev_t *deviceInfo1;        /**< Pointer to OCProvisionDev_t.**/
  75     const OCProvisionDev_t *deviceInfo2;        /**< Pointer to OCProvisionDev_t.**/
  76     OicSecCred_t *credInfo;                     /**< Pointer to OicSecCred_t.**/
  77     OicSecCred_t *credInfoFirst;                /**< Pointer to OicSecCred_t.**/
  78     OCProvisionResultCB resultCallback;         /**< Pointer to result callback.**/
  79     OCProvisionResult_t *resArr;                /**< Result array.**/
  80     int numOfResults;                           /**< Number of results in result array.**/
  81 };
  82
  83 /**
  84  * Structure to carry ACL provision API data to callback.
  85  */
  86 typedef struct ACLData ACLData_t;
  87 struct ACLData
  88 {
  89     void *ctx;                                  /**< Pointer to user context.**/
  90     const OCProvisionDev_t *deviceInfo;         /**< Pointer to PMDevInfo_t.**/
  91     OCProvisionResultCB resultCallback;         /**< Pointer to result callback.**/
  92     OCProvisionResult_t *resArr;                /**< Result array.**/
  93     int numOfResults;                           /**< Number of results in result array.**/
  94 };
  95
  96 // Structure to carry get security resource APIs data to callback.
  97 typedef struct GetSecData GetSecData_t;
  98 struct GetSecData {
  99     void *ctx;
 100     const OCProvisionDev_t *deviceInfo;         /**< Pointer to PMDevInfo_t.**/
 101     OCProvisionResultCB resultCallback;         /**< Pointer to result callback.**/
 102     OCProvisionResult_t *resArr;                /**< Result array.**/
 103     int numOfResults;                        /**< Number of results in result array.**/
 104 };
 105
 106 /**
 107  * Structure to carry PCONF provision API data to callback.
 108  */
 109 typedef struct PconfData PconfData_t;
 110 struct PconfData
 111 {
 112     void *ctx;                                  /**< Pointer to user context.**/
 113     const OCProvisionDev_t *deviceInfo;         /**< Pointer to PMDevInfo_t.**/
 114     OCProvisionResultCB resultCallback;         /**< Pointer to result callback.**/
 115     OCProvisionResult_t *resArr;                /**< Result array.**/
 116     int numOfResults;                           /**< Number of results in result array.**/
 117 };
 118
 119 // Enum type index for unlink callback.
 120 typedef enum {
 121     IDX_FIRST_DEVICE_RES = 0, // index for resulf of the first device
 122     IDX_SECOND_DEVICE_RES,    // index for result of the second device
 123     IDX_DB_UPDATE_RES         // index for result of updating provisioning database.
 124 } IdxUnlinkRes_t;
 125
 126 // Structure to carry unlink APIs data to callback.
 127 typedef struct UnlinkData UnlinkData_t;
 128 struct UnlinkData {
 129     void *ctx;
 130     OCProvisionDev_t* unlinkDev;             /**< Pointer to OCProvisionDev_t to be unlinked.**/
 131     OCProvisionResult_t* unlinkRes;          /**< Result array.**/
 132     OCProvisionResultCB resultCallback;      /**< Pointer to result callback.**/
 133     int numOfResults;                        /**< Number of results in result array.**/
 134 };
 135
 136 //Example of DELETE cred request -> coaps://0.0.0.0:5684/oic/sec/cred?sub=(BASE64 ENCODED UUID)
 137 const char * SRP_FORM_DELETE_CREDENTIAL = "coaps://[%s]:%d%s?%s=%s";
 138
 139 // Structure to carry remove APIs data to callback.
 140 typedef struct RemoveData RemoveData_t;
 141 struct RemoveData {
 142     void *ctx;
 143     OCProvisionDev_t* revokeTargetDev;      /**< Device which is going to be revoked..**/
 144     OCProvisionDev_t* linkedDevList;        /**< A list of devices which have invalid credential.**/
 145     OCProvisionResult_t* removeRes;         /**< Result array.**/
 146     OCProvisionResultCB resultCallback;     /**< Pointer to result callback.**/
 147     size_t numOfResults;                    /**< Number of results in result array.**/
 148     size_t sizeOfResArray;
 149     bool hasError;
 150 };
 151
 152 /**
 153  * Function prototype
 154  */
 155 static OCStackResult provisionCredentials(const OicSecCred_t *cred,
 156         const OCProvisionDev_t *deviceInfo, CredentialData_t *credData,
 157         OCClientResponseHandler responseHandler);
 158
 159
 160 /**
 161  * Internal function to update result in result array.
 162  */
 163 static void registerResultForCredProvisioning(CredentialData_t *credData,
 164                                               OCStackResult stackresult, int cause)
 165 {
 166
 167    OIC_LOG_V(INFO,TAG,"value of credData->numOfResults is %d",credData->numOfResults);
 168    if(1 == cause)
 169    {
 170        memcpy(credData->resArr[(credData->numOfResults)].deviceId.id,
 171               credData->deviceInfo1->doxm->deviceID.id,UUID_LENGTH);
 172    }
 173    else
 174    {
 175        memcpy(credData->resArr[(credData->numOfResults)].deviceId.id,
 176               credData->deviceInfo2->doxm->deviceID.id,UUID_LENGTH);
 177    }
 178    credData->resArr[(credData->numOfResults)].res = stackresult;
 179    ++(credData->numOfResults);
 180 }
 181
 182 /**
 183  * Callback handler for handling callback of provisioning device 2.
 184  *
 185  * @param[in] ctx             ctx value passed to callback from calling function.
 186  * @param[in] UNUSED          handle to an invocation
 187  * @param[in] clientResponse  Response from queries to remote servers.
 188  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 189  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 190  */
 191 static OCStackApplicationResult provisionCredentialCB2(void *ctx, OCDoHandle UNUSED,
 192                                                        OCClientResponse *clientResponse)
 193 {
 194     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
 195     CredentialData_t *credData = (CredentialData_t *) ctx;
 196     (void)UNUSED;
 197
 198     OCProvisionResultCB resultCallback = credData->resultCallback;
 199     OIC_LOG(INFO, TAG, "provisionCredentialCB2 called");
 200     if (clientResponse)
 201     {
 202         if(OC_STACK_RESOURCE_CREATED == clientResponse->result)
 203         {
 204             registerResultForCredProvisioning(credData, OC_STACK_RESOURCE_CREATED, 2);
 205             OCStackResult res =  PDMLinkDevices(&credData->deviceInfo1->doxm->deviceID,
 206                     &credData->deviceInfo2->doxm->deviceID);
 207             if (OC_STACK_OK != res)
 208             {
 209                 OIC_LOG(ERROR, TAG, "Error occured on PDMLinkDevices");
 210                 return OC_STACK_DELETE_TRANSACTION;
 211             }
 212             OIC_LOG(INFO, TAG, "Link created successfully");
 213
 214             ((OCProvisionResultCB)(resultCallback))(credData->ctx, credData->numOfResults,
 215                                                     credData->resArr,
 216                                                     false);
 217              OICFree(credData->resArr);
 218              OICFree(credData);
 219              return OC_STACK_DELETE_TRANSACTION;
 220         }
 221
 222     }
 223     OIC_LOG(INFO, TAG, "provisionCredentialCB2 received Null clientResponse");
 224     registerResultForCredProvisioning(credData, OC_STACK_ERROR, 2);
 225     ((OCProvisionResultCB)(resultCallback))(credData->ctx, credData->numOfResults,
 226                                             credData->resArr,
 227                                             true);
 228     OICFree(credData->resArr);
 229     OICFree(credData);
 230     return OC_STACK_DELETE_TRANSACTION;
 231 }
 232
 233 /**
 234  * Callback handler for handling callback of provisioning device 1.
 235  *
 236  * @param[in] ctx             ctx value passed to callback from calling function.
 237  * @param[in] UNUSED          handle to an invocation
 238  * @param[in] clientResponse  Response from queries to remote servers.
 239  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 240  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 241  */
 242 static OCStackApplicationResult provisionCredentialCB1(void *ctx, OCDoHandle UNUSED,
 243                                                        OCClientResponse *clientResponse)
 244 {
 245     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
 246     (void)UNUSED;
 247     CredentialData_t* credData = (CredentialData_t*) ctx;
 248     OICFree(credData->credInfoFirst);
 249     const OCProvisionDev_t *deviceInfo = credData->deviceInfo2;
 250     OicSecCred_t *credInfo = credData->credInfo;
 251     const OCProvisionResultCB resultCallback = credData->resultCallback;
 252     if (clientResponse)
 253     {
 254         if (OC_STACK_RESOURCE_CREATED == clientResponse->result)
 255         {
 256             // send credentials to second device
 257             registerResultForCredProvisioning(credData, OC_STACK_RESOURCE_CREATED,1);
 258             OCStackResult res = provisionCredentials(credInfo, deviceInfo, credData,
 259                     provisionCredentialCB2);
 260             DeleteCredList(credInfo);
 261             if (OC_STACK_OK != res)
 262             {
 263                 registerResultForCredProvisioning(credData, res,2);
 264                 ((OCProvisionResultCB)(resultCallback))(credData->ctx, credData->numOfResults,
 265                                                         credData->resArr,
 266                                                         true);
 267                 OICFree(credData->resArr);
 268                 OICFree(credData);
 269                 credData = NULL;
 270             }
 271         }
 272         else
 273         {
 274             registerResultForCredProvisioning(credData, OC_STACK_ERROR,1);
 275             ((OCProvisionResultCB)(resultCallback))(credData->ctx, credData->numOfResults,
 276                                                     credData->resArr,
 277                                                     true);
 278             OICFree(credData->resArr);
 279             OICFree(credData);
 280             credData = NULL;
 281         }
 282     }
 283     else
 284     {
 285         OIC_LOG(INFO, TAG, "provisionCredentialCB received Null clientResponse for first device");
 286         registerResultForCredProvisioning(credData, OC_STACK_ERROR,1);
 287        ((OCProvisionResultCB)(resultCallback))(credData->ctx, credData->numOfResults,
 288                                                      credData->resArr,
 289                                                      true);
 290         DeleteCredList(credInfo);
 291         OICFree(credData->resArr);
 292         OICFree(credData);
 293         credData = NULL;
 294     }
 295     return OC_STACK_DELETE_TRANSACTION;
 296 }
 297
 298
 299
 300 /**
 301  * Internal function for handling credential generation and sending credential to resource server.
 302  *
 303  * @param[in] cred Instance of cred resource.
 304  * @param[in] deviceInfo information about device to which credential is to be provisioned.
 305  * @param[in] responseHandler callbak called by OC stack when request API receives response.
 306  * @return  OC_STACK_OK in case of success and other value otherwise.
 307  */
 308 static OCStackResult provisionCredentials(const OicSecCred_t *cred,
 309         const OCProvisionDev_t *deviceInfo, CredentialData_t *credData,
 310         OCClientResponseHandler responseHandler)
 311 {
 312     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
 313     if (!secPayload)
 314     {
 315         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
 316         return OC_STACK_NO_MEMORY;
 317     }
 318     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
 319     int secureFlag = 0;
 320     OCStackResult res = CredToCBORPayload(cred, &secPayload->securityData,
 321                                           &secPayload->payloadSize, secureFlag);
 322     if((OC_STACK_OK != res) && (NULL == secPayload->securityData))
 323     {
 324         OCPayloadDestroy((OCPayload *)secPayload);
 325         OIC_LOG(ERROR, TAG, "Failed to CredToCBORPayload");
 326         return OC_STACK_NO_MEMORY;
 327     }
 328
 329     OIC_LOG(DEBUG, TAG, "Created payload for Cred:");
 330     OIC_LOG_BUFFER(DEBUG, TAG, secPayload->securityData, secPayload->payloadSize);
 331     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
 332     if(!PMGenerateQuery(true,
 333                         deviceInfo->endpoint.addr,
 334                         deviceInfo->securePort,
 335                         deviceInfo->connType,
 336                         query, sizeof(query), OIC_RSRC_CRED_URI))
 337     {
 338         OIC_LOG(ERROR, TAG, "DeviceDiscoveryHandler : Failed to generate query");
 339         return OC_STACK_ERROR;
 340     }
 341     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
 342
 343     OCCallbackData cbData = {.context=NULL, .cb=NULL, .cd=NULL};
 344     cbData.cb = responseHandler;
 345     cbData.context = (void *) credData;
 346     cbData.cd = NULL;
 347
 348     OCDoHandle handle = NULL;
 349     OCMethod method = OC_REST_POST;
 350     OCStackResult ret = OCDoResource(&handle, method, query, 0, (OCPayload*)secPayload,
 351             deviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
 352     OIC_LOG_V(INFO, TAG, "OCDoResource::Credential provisioning returned : %d",ret);
 353     if (ret != OC_STACK_OK)
 354     {
 355         OIC_LOG(ERROR, TAG, "OCStack resource error");
 356         return ret;
 357     }
 358     return OC_STACK_OK;
 359 }
 360
 361 #ifdef __WITH_X509__
 362 /**
 363  * Structure to carry certificate data to callback.
 364  */
 365 typedef struct CertificateData CertData_t;
 366 struct CertificateData
 367 {
 368     void *ctx;                                  /**< Pointer to user context.**/
 369     const OCProvisionDev_t *deviceInfo;        /**< Pointer to OCProvisionDev_t.**/
 370     OicSecCred_t *credInfo;                     /**< Pointer to OicSecCred_t.**/
 371     OCProvisionResultCB resultCallback;         /**< Pointer to result callback.**/
 372     OCProvisionResult_t *resArr;                /**< Result array.**/
 373     int numOfResults;                           /**< Number of results in result array.**/
 374 };
 375
 376 /**
 377  * Structure to carry CRL provision API data to callback.
 378  */
 379 typedef struct CRLData CRLData_t;
 380 struct CRLData
 381 {
 382     void *ctx;                                  /**< Pointer to user context.**/
 383     const OCProvisionDev_t *deviceInfo;         /**< Pointer to PMDevInfo_t.**/
 384     OCProvisionResultCB resultCallback;         /**< Pointer to result callback.**/
 385     OCProvisionResult_t *resArr;                /**< Result array.**/
 386     int numOfResults;                           /**< Number of results in result array.**/
 387 };
 388
 389 /**
 390  * Internal function to update result in result array.
 391  */
 392 static void registerResultForCertProvisioning(CertData_t *certData,
 393                                               OCStackResult stackresult)
 394 {
 395
 396    OIC_LOG_V(INFO,TAG,"value of credData->numOfResults is %d",certData->numOfResults);
 397    memcpy(certData->resArr[(certData->numOfResults)].deviceId.id,
 398           certData->deviceInfo->doxm->deviceID.id,UUID_LENGTH);
 399    certData->resArr[(certData->numOfResults)].res = stackresult;
 400    ++(certData->numOfResults);
 401 }
 402
 403 /**
 404  * Internal Function to store results in result array during ACL provisioning.
 405  */
 406 static void registerResultForCRLProvisioning(CRLData_t *crlData,
 407                                              OCStackResult stackresult)
 408 {
 409    OIC_LOG_V(INFO, TAG, "Inside registerResultForCRLProvisioning crlData->numOfResults is %d\n",
 410                        crlData->numOfResults);
 411    memcpy(crlData->resArr[(crlData->numOfResults)].deviceId.id,
 412           crlData->deviceInfo->doxm->deviceID.id, UUID_LENGTH);
 413    crlData->resArr[(crlData->numOfResults)].res = stackresult;
 414    ++(crlData->numOfResults);
 415 }
 416
 417
 418 /**
 419  * Callback handler of SRPProvisionCRL.
 420  *
 421  * @param[in] ctx             ctx value passed to callback from calling function.
 422  * @param[in] UNUSED          handle to an invocation
 423  * @param[in] clientResponse  Response from queries to remote servers.
 424  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 425  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 426  */
 427 static OCStackApplicationResult SRPProvisionCRLCB(void *ctx, OCDoHandle UNUSED,
 428                                                   OCClientResponse *clientResponse)
 429 {
 430     OIC_LOG_V(INFO, TAG, "Inside SRPProvisionCRLCB.");
 431     (void)UNUSED;
 432     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
 433     CRLData_t *crlData = (CRLData_t*)ctx;
 434     OCProvisionResultCB resultCallback = crlData->resultCallback;
 435
 436     if (clientResponse)
 437     {
 438         if(OC_STACK_RESOURCE_CREATED == clientResponse->result)
 439         {
 440             registerResultForCRLProvisioning(crlData, OC_STACK_RESOURCE_CREATED);
 441             ((OCProvisionResultCB)(resultCallback))(crlData->ctx, crlData->numOfResults,
 442                                                     crlData->resArr,
 443                                                     false);
 444              OICFree(crlData->resArr);
 445              OICFree(crlData);
 446              return OC_STACK_DELETE_TRANSACTION;
 447         }
 448     }
 449     registerResultForCRLProvisioning(crlData, OC_STACK_ERROR);
 450     ((OCProvisionResultCB)(resultCallback))(crlData->ctx, crlData->numOfResults,
 451                                             crlData->resArr,
 452                                             true);
 453     OIC_LOG_V(ERROR, TAG, "SRPProvisionCRLCB received Null clientResponse");
 454     OICFree(crlData->resArr);
 455     OICFree(crlData);
 456     return OC_STACK_DELETE_TRANSACTION;
 457 }
 458
 459 OCStackResult SRPProvisionCRL(void *ctx, const OCProvisionDev_t *selectedDeviceInfo,
 460         OicSecCrl_t *crl, OCProvisionResultCB resultCallback)
 461 {
 462     VERIFY_NON_NULL(TAG, selectedDeviceInfo, ERROR,  OC_STACK_INVALID_PARAM);
 463     VERIFY_NON_NULL(TAG, crl, ERROR,  OC_STACK_INVALID_PARAM);
 464     VERIFY_NON_NULL(TAG, resultCallback, ERROR,  OC_STACK_INVALID_CALLBACK);
 465
 466     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
 467     if (!secPayload)
 468     {
 469         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
 470         return OC_STACK_NO_MEMORY;
 471     }
 472
 473     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
 474     OCStackResult res = CrlToCBORPayload(crl, &secPayload->securityData, &secPayload->payloadSize);
 475     if((OC_STACK_OK != res) && (NULL == secPayload->securityData))
 476     {
 477         OICFree(secPayload);
 478         OIC_LOG(ERROR, TAG, "Failed to BinToCrlJSON");
 479         return OC_STACK_NO_MEMORY;
 480     }
 481     OIC_LOG(DEBUG, TAG, "Created payload for CRL:");
 482     OIC_LOG_BUFFER(DEBUG, TAG, secPayload->securityData, secPayload->payloadSize);
 483
 484     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
 485     if(!PMGenerateQuery(true,
 486                         selectedDeviceInfo->endpoint.addr,
 487                         selectedDeviceInfo->securePort,
 488                         selectedDeviceInfo->connType,
 489                         query, sizeof(query), OIC_RSRC_CRL_URI))
 490     {
 491         OIC_LOG(ERROR, TAG, "DeviceDiscoveryHandler : Failed to generate query");
 492         OCPayloadDestroy((OCPayload *)secPayload);
 493         return OC_STACK_ERROR;
 494     }
 495     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
 496
 497     OCCallbackData cbData =  {.context=NULL, .cb=NULL, .cd=NULL};
 498     cbData.cb = &SRPProvisionCRLCB;
 499     CRLData_t *crlData = (CRLData_t *) OICCalloc(1, sizeof(CRLData_t));
 500     if (crlData == NULL)
 501     {
 502         OCPayloadDestroy((OCPayload *)secPayload);
 503         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
 504         return OC_STACK_NO_MEMORY;
 505     }
 506
 507     crlData->deviceInfo = selectedDeviceInfo;
 508     crlData->resultCallback = resultCallback;
 509     crlData->numOfResults=0;
 510     crlData->ctx = ctx;
 511
 512     crlData->resArr = (OCProvisionResult_t*)OICCalloc(1, sizeof(OCProvisionResult_t));
 513     if (crlData->resArr == NULL)
 514     {
 515         OCPayloadDestroy((OCPayload *)secPayload);
 516         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
 517         return OC_STACK_NO_MEMORY;
 518     }
 519
 520     cbData.context = (void *)crlData;
 521     cbData.cd = NULL;
 522     OCMethod method = OC_REST_POST;
 523     OCDoHandle handle = NULL;
 524     OIC_LOG(DEBUG, TAG, "Sending CRL info to resource server");
 525
 526     OCStackResult ret = OCDoResource(&handle, method, query,
 527             &selectedDeviceInfo->endpoint, (OCPayload*)secPayload,
 528             selectedDeviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
 529
 530     if (ret != OC_STACK_OK)
 531     {
 532         OICFree(crlData->resArr);
 533         OICFree(crlData);
 534     }
 535
 536     return ret;
 537 }
 538
 539 /**
 540  * Internal function for handling credential generation and sending cretificate credential.
 541  *
 542  * @param[in] cred Instance of cred resource.
 543  * @param[in] deviceInfo information about device to which credential is to be provisioned.
 544  * @param[in] responseHandler callbak called by OC stack when request API receives response.
 545  * @return  OC_STACK_OK in case of success and other value otherwise.
 546  */
 547 static OCStackResult provisionCertCred(const OicSecCred_t *cred,
 548         const OCProvisionDev_t *deviceInfo, CertData_t *certData,
 549         OCClientResponseHandler responseHandler)
 550 {
 551     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
 552     if(!secPayload)
 553     {
 554         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
 555         return OC_STACK_NO_MEMORY;
 556     }
 557     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
 558     int secureFlag = 0;
 559     OCStackResult res = CredToCBORPayload(cred, &secPayload->securityData,
 560         &secPayload->payloadSize, secureFlag);
 561
 562     if ((OC_STACK_OK != res) || (NULL == secPayload->securityData))
 563     {
 564         OICFree(secPayload);
 565         OIC_LOG(ERROR, TAG, "Failed to CredToCBORPayload");
 566         return OC_STACK_NO_MEMORY;
 567     }
 568
 569     OIC_LOG(DEBUG, TAG, "Created payload for Cred:");
 570     OIC_LOG_BUFFER(DEBUG, TAG, secPayload->securityData, secPayload->payloadSize);
 571     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
 572     if(!PMGenerateQuery(true,
 573                         deviceInfo->endpoint.addr,
 574                         deviceInfo->securePort,
 575                         deviceInfo->connType,
 576                         query, sizeof(query), OIC_RSRC_CRED_URI))
 577     {
 578         OIC_LOG(ERROR, TAG, "DeviceDiscoveryHandler : Failed to generate query");
 579         OCPayloadDestroy((OCPayload *)secPayload);
 580         return OC_STACK_ERROR;
 581     }
 582     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
 583
 584     OCCallbackData cbData = {.context=NULL, .cb=NULL, .cd=NULL};
 585     cbData.cb = responseHandler;
 586     cbData.context = (void *) certData;
 587     cbData.cd = NULL;
 588
 589     OCDoHandle handle = NULL;
 590     OCMethod method = OC_REST_POST;
 591     OCStackResult ret = OCDoResource(&handle, method, query, 0, (OCPayload*)secPayload,
 592             deviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
 593     OIC_LOG_V(INFO, TAG, "OCDoResource::Certificate provisioning returned : %d",ret);
 594     if (ret != OC_STACK_OK)
 595     {
 596         OIC_LOG(ERROR, TAG, "OCStack resource error");
 597     }
 598
 599     return ret;
 600 }
 601
 602 /**
 603  * Callback handler for handling callback of certificate provisioning device.
 604  *
 605  * @param[in] ctx             ctx value passed to callback from calling function.
 606  * @param[in] UNUSED          handle to an invocation
 607  * @param[in] clientResponse  Response from queries to remote servers.
 608  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 609  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 610  */
 611 static OCStackApplicationResult provisionCertCB(void *ctx, OCDoHandle UNUSED,
 612                                                        OCClientResponse *clientResponse)
 613 {
 614     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
 615     CertData_t *certData = (CertData_t *) ctx;
 616     (void)UNUSED;
 617
 618     OCProvisionResultCB resultCallback = certData->resultCallback;
 619     OIC_LOG(INFO, TAG, "provisionCertCred called");
 620     if (clientResponse)
 621     {
 622         if(OC_STACK_RESOURCE_CREATED == clientResponse->result)
 623         {
 624             registerResultForCertProvisioning(certData, OC_STACK_RESOURCE_CREATED);
 625             ((OCProvisionResultCB)(resultCallback))(certData->ctx, certData->numOfResults,
 626                                                     certData->resArr,
 627                                                     false);
 628              OICFree(certData->resArr);
 629              OICFree(certData);
 630              return OC_STACK_DELETE_TRANSACTION;
 631         }
 632
 633     }
 634     OIC_LOG(INFO, TAG, "provisionCertCredCB received Null clientResponse");
 635     registerResultForCertProvisioning(certData, OC_STACK_ERROR);
 636     ((OCProvisionResultCB)(resultCallback))(certData->ctx, certData->numOfResults,
 637                                             certData->resArr,
 638                                             true);
 639     OICFree(certData->resArr);
 640     OICFree(certData);
 641     return OC_STACK_DELETE_TRANSACTION;
 642 }
 643 #endif // __WITH_X509__
 644
 645 OCStackResult SRPProvisionCredentials(void *ctx, OicSecCredType_t type, size_t keySize,
 646                                       const OCProvisionDev_t *pDev1,
 647                                       const OCProvisionDev_t *pDev2,
 648                                       OCProvisionResultCB resultCallback)
 649 {
 650     VERIFY_NON_NULL(TAG, pDev1, ERROR,  OC_STACK_INVALID_PARAM);
 651     if (SYMMETRIC_PAIR_WISE_KEY == type)
 652     {
 653         VERIFY_NON_NULL(TAG, pDev2, ERROR,  OC_STACK_INVALID_PARAM);
 654     }
 655     if (!resultCallback)
 656     {
 657         OIC_LOG(INFO, TAG, "SRPUnlinkDevices : NULL Callback");
 658         return OC_STACK_INVALID_CALLBACK;
 659     }
 660     if (SYMMETRIC_PAIR_WISE_KEY == type &&
 661         0 == memcmp(&pDev1->doxm->deviceID, &pDev2->doxm->deviceID, sizeof(OicUuid_t)))
 662     {
 663         OIC_LOG(INFO, TAG, "SRPUnlinkDevices : Same device ID");
 664         return OC_STACK_INVALID_PARAM;
 665     }
 666
 667     if (SYMMETRIC_PAIR_WISE_KEY == type &&
 668        !(OWNER_PSK_LENGTH_128 == keySize || OWNER_PSK_LENGTH_256 == keySize))
 669     {
 670         OIC_LOG(INFO, TAG, "Invalid key size");
 671         return OC_STACK_INVALID_PARAM;
 672     }
 673
 674     OIC_LOG(INFO, TAG, "In SRPProvisionCredentials");
 675
 676     if (SYMMETRIC_PAIR_WISE_KEY == type)
 677     {
 678         bool linkExisits = true;
 679         OCStackResult res = PDMIsLinkExists(&pDev1->doxm->deviceID, &pDev2->doxm->deviceID, &linkExisits);
 680
 681         if (res != OC_STACK_OK)
 682         {
 683             OIC_LOG(ERROR, TAG, "Internal error occured");
 684             return res;
 685         }
 686         if (linkExisits)
 687         {
 688             OIC_LOG(ERROR, TAG, "Link already exists");
 689             return OC_STACK_INVALID_PARAM;
 690         }
 691     }
 692
 693     OicUuid_t provTooldeviceID =   {{0,}};
 694     if (OC_STACK_OK != GetDoxmDeviceID(&provTooldeviceID))
 695     {
 696         OIC_LOG(ERROR, TAG, "Error while retrieving provisioning tool's device ID");
 697         return OC_STACK_ERROR;
 698     }
 699     OIC_LOG(INFO, TAG, "retrieved deviceid");
 700     switch (type)
 701     {
 702         case SYMMETRIC_PAIR_WISE_KEY:
 703         {
 704             const OCProvisionDev_t *firstDevice = pDev1;
 705             const OCProvisionDev_t *secondDevice = pDev2;
 706
 707             OicSecCred_t *firstCred = NULL;
 708             OicSecCred_t *secondCred = NULL;
 709             OCStackResult res = PMGeneratePairWiseCredentials(type, keySize, &provTooldeviceID,
 710                     &firstDevice->doxm->deviceID, &secondDevice->doxm->deviceID,
 711                     &firstCred, &secondCred);
 712             VERIFY_SUCCESS(TAG, (res==OC_STACK_OK), ERROR, OC_STACK_ERROR);
 713             OIC_LOG(INFO, TAG, "Credentials generated successfully");
 714             CredentialData_t *credData =
 715                 (CredentialData_t *) OICCalloc(1, sizeof(CredentialData_t));
 716             if (NULL == credData)
 717             {
 718                 OICFree(firstCred);
 719                 OICFree(secondCred);
 720                 OIC_LOG(ERROR, TAG, "Memory allocation problem");
 721                 return OC_STACK_NO_MEMORY;
 722             }
 723             credData->deviceInfo1 = firstDevice;
 724             credData->deviceInfo2 = secondDevice;
 725             credData->credInfo = secondCred;
 726             credData->ctx = ctx;
 727             credData->credInfoFirst = firstCred;
 728             credData->numOfResults = 0;
 729             credData->resultCallback = resultCallback;
 730             // first call to provision creds to device1.
 731             // second call to provision creds to device2.
 732             int noOfRiCalls = 2;
 733             credData->resArr =
 734                 (OCProvisionResult_t*)OICCalloc(noOfRiCalls, sizeof(OCProvisionResult_t));
 735             if (NULL == credData->resArr)
 736             {
 737                 OICFree(firstCred);
 738                 OICFree(secondCred);
 739                 OICFree(credData);
 740                 OIC_LOG(ERROR, TAG, "Memory allocation problem");
 741                 return OC_STACK_NO_MEMORY;
 742             }
 743             res = provisionCredentials(firstCred, firstDevice, credData, &provisionCredentialCB1);
 744             if (OC_STACK_OK != res)
 745             {
 746                 DeleteCredList(firstCred);
 747                 DeleteCredList(secondCred);
 748                 OICFree(credData->resArr);
 749                 OICFree(credData);
 750             }
 751             OIC_LOG_V(INFO, TAG, "provisionCredentials returned: %d",res);
 752             VERIFY_SUCCESS(TAG, (res==OC_STACK_OK), ERROR, OC_STACK_ERROR);
 753             return res;
 754         }
 755 #ifdef __WITH_X509__
 756         case SIGNED_ASYMMETRIC_KEY:
 757         {
 758             const OCProvisionDev_t *firstDevice = pDev1;
 759             OicSecCred_t *cred = NULL;
 760             OCStackResult res = PMGenerateCertificateCredentials(&provTooldeviceID,
 761                                                                 &firstDevice->doxm->deviceID,&cred);
 762             VERIFY_SUCCESS(TAG, (res==OC_STACK_OK), ERROR, OC_STACK_ERROR);
 763             OIC_LOG(INFO, TAG, "Certificate credentials generated successfully");
 764             CertData_t *certData = (CertData_t *) OICCalloc(1, sizeof(CertData_t));
 765             if (NULL == certData)
 766             {
 767                 OICFree(cred);
 768                 OIC_LOG(ERROR, TAG, "Memory allocation problem");
 769                 return OC_STACK_NO_MEMORY;
 770             }
 771
 772             certData->deviceInfo = firstDevice;
 773             certData->ctx = ctx;
 774             certData->credInfo = cred;
 775             certData->numOfResults = 0;
 776             certData->resultCallback = resultCallback;
 777
 778             certData->resArr = (OCProvisionResult_t*)OICCalloc(1, sizeof(OCProvisionResult_t));
 779             if (NULL == certData->resArr)
 780             {
 781                 DeleteCredList(cred);
 782                 OICFree(certData);
 783                 OIC_LOG(ERROR, TAG, "Memory allocation problem");
 784                 return OC_STACK_NO_MEMORY;
 785             }
 786
 787             res = provisionCertCred(cred, firstDevice, certData, &provisionCertCB);
 788             if (OC_STACK_OK != res)
 789             {
 790                 OICFree(certData->resArr);
 791                 OICFree(certData);
 792             }
 793             DeleteCredList(cred);
 794             OIC_LOG_V(INFO, TAG, "provisionCertCredentials returned: %d",res);
 795
 796             return res;
 797         }
 798 #endif
 799         default:
 800         {
 801             OIC_LOG(ERROR, TAG, "Invalid option.");
 802             return OC_STACK_INVALID_PARAM;
 803         }
 804     }
 805     return OC_STACK_ERROR;
 806 }
 807
 808 /**
 809  * Internal Function to store results in result array during ACL provisioning.
 810  */
 811 static void registerResultForACLProvisioning(ACLData_t *aclData,
 812                                              OCStackResult stackresult)
 813 {
 814    OIC_LOG_V(INFO, TAG, "Inside registerResultForACLProvisioning aclData->numOfResults is %d\n",
 815                        aclData->numOfResults);
 816    memcpy(aclData->resArr[(aclData->numOfResults)].deviceId.id,
 817           aclData->deviceInfo->doxm->deviceID.id, UUID_LENGTH);
 818    aclData->resArr[(aclData->numOfResults)].res = stackresult;
 819    ++(aclData->numOfResults);
 820 }
 821
 822 /**
 823  * Callback handler of SRPProvisionACL.
 824  *
 825  * @param[in] ctx             ctx value passed to callback from calling function.
 826  * @param[in] UNUSED          handle to an invocation
 827  * @param[in] clientResponse  Response from queries to remote servers.
 828  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 829  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 830  */
 831 static OCStackApplicationResult SRPProvisionACLCB(void *ctx, OCDoHandle UNUSED,
 832                                                   OCClientResponse *clientResponse)
 833 {
 834     OIC_LOG_V(INFO, TAG, "Inside SRPProvisionACLCB.");
 835     (void)UNUSED;
 836     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
 837     ACLData_t *aclData = (ACLData_t*)ctx;
 838     OCProvisionResultCB resultCallback = aclData->resultCallback;
 839
 840     if (clientResponse)
 841     {
 842         if(OC_STACK_RESOURCE_CREATED == clientResponse->result)
 843         {
 844             registerResultForACLProvisioning(aclData, OC_STACK_RESOURCE_CREATED);
 845             ((OCProvisionResultCB)(resultCallback))(aclData->ctx, aclData->numOfResults,
 846                                                     aclData->resArr,
 847                                                     false);
 848              OICFree(aclData->resArr);
 849              OICFree(aclData);
 850              return OC_STACK_DELETE_TRANSACTION;
 851         }
 852     }
 853     registerResultForACLProvisioning(aclData, OC_STACK_ERROR);
 854     ((OCProvisionResultCB)(resultCallback))(aclData->ctx, aclData->numOfResults,
 855                                             aclData->resArr,
 856                                             true);
 857     OIC_LOG_V(ERROR, TAG, "SRPProvisionACLCB received Null clientResponse");
 858     OICFree(aclData->resArr);
 859     OICFree(aclData);
 860     return OC_STACK_DELETE_TRANSACTION;
 861 }
 862
 863 OCStackResult SRPProvisionACL(void *ctx, const OCProvisionDev_t *selectedDeviceInfo,
 864         OicSecAcl_t *acl, OCProvisionResultCB resultCallback)
 865 {
 866     VERIFY_NON_NULL(TAG, selectedDeviceInfo, ERROR,  OC_STACK_INVALID_PARAM);
 867     VERIFY_NON_NULL(TAG, acl, ERROR,  OC_STACK_INVALID_PARAM);
 868     VERIFY_NON_NULL(TAG, resultCallback, ERROR,  OC_STACK_INVALID_CALLBACK);
 869
 870     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
 871     if(!secPayload)
 872     {
 873         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
 874         return OC_STACK_NO_MEMORY;
 875     }
 876     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
 877     if(OC_STACK_OK != AclToCBORPayload(acl, &secPayload->securityData, &secPayload->payloadSize))
 878     {
 879         OCPayloadDestroy((OCPayload *)secPayload);
 880         OIC_LOG(ERROR, TAG, "Failed to AclToCBORPayload");
 881         return OC_STACK_NO_MEMORY;
 882     }
 883     OIC_LOG(DEBUG, TAG, "Created payload for ACL:");
 884     OIC_LOG_BUFFER(DEBUG, TAG, secPayload->securityData, secPayload->payloadSize);
 885
 886     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
 887     if(!PMGenerateQuery(true,
 888                         selectedDeviceInfo->endpoint.addr,
 889                         selectedDeviceInfo->securePort,
 890                         selectedDeviceInfo->connType,
 891                         query, sizeof(query), OIC_RSRC_ACL_URI))
 892     {
 893         OIC_LOG(ERROR, TAG, "DeviceDiscoveryHandler : Failed to generate query");
 894         return OC_STACK_ERROR;
 895     }
 896     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
 897
 898     OCCallbackData cbData =  {.context=NULL, .cb=NULL, .cd=NULL};
 899     cbData.cb = &SRPProvisionACLCB;
 900     ACLData_t *aclData = (ACLData_t *) OICCalloc(1, sizeof(ACLData_t));
 901     if (aclData == NULL)
 902     {
 903         OCPayloadDestroy((OCPayload *)secPayload);
 904         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
 905         return OC_STACK_NO_MEMORY;
 906     }
 907     aclData->deviceInfo = selectedDeviceInfo;
 908     aclData->resultCallback = resultCallback;
 909     aclData->numOfResults=0;
 910     aclData->ctx = ctx;
 911     // call to provision ACL to device1.
 912     int noOfRiCalls = 1;
 913     aclData->resArr = (OCProvisionResult_t*)OICCalloc(noOfRiCalls, sizeof(OCProvisionResult_t));
 914     if (aclData->resArr == NULL)
 915     {
 916         OICFree(aclData);
 917         OCPayloadDestroy((OCPayload *)secPayload);
 918         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
 919         return OC_STACK_NO_MEMORY;
 920     }
 921     cbData.context = (void *)aclData;
 922     cbData.cd = NULL;
 923     OCMethod method = OC_REST_POST;
 924     OCDoHandle handle = NULL;
 925     OIC_LOG(DEBUG, TAG, "Sending ACL info to resource server");
 926     OCStackResult ret = OCDoResource(&handle, method, query,
 927             &selectedDeviceInfo->endpoint, (OCPayload*)secPayload,
 928             selectedDeviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
 929     if (ret != OC_STACK_OK)
 930     {
 931         OICFree(aclData->resArr);
 932         OICFree(aclData);
 933     }
 934     VERIFY_SUCCESS(TAG, (OC_STACK_OK == ret), ERROR, OC_STACK_ERROR);
 935     return OC_STACK_OK;
 936 }
 937
 938 /**
 939  * Internal Function to store results in result array during Direct-Pairing provisioning.
 940  */
 941 static void registerResultForDirectPairingProvisioning(PconfData_t *pconfData,
 942                                              OCStackResult stackresult)
 943 {
 944    OIC_LOG_V(INFO, TAG, "Inside registerResultForDirectPairingProvisioning "
 945            "pconfData->numOfResults is %d\n", pconfData->numOfResults);
 946    memcpy(pconfData->resArr[(pconfData->numOfResults)].deviceId.id,
 947           pconfData->deviceInfo->doxm->deviceID.id, UUID_LENGTH);
 948    pconfData->resArr[(pconfData->numOfResults)].res = stackresult;
 949    ++(pconfData->numOfResults);
 950 }
 951
 952 /**
 953  * Callback handler of SRPProvisionDirectPairing.
 954  *
 955  * @param[in] ctx             ctx value passed to callback from calling function.
 956  * @param[in] UNUSED          handle to an invocation
 957  * @param[in] clientResponse  Response from queries to remote servers.
 958  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
 959  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
 960  */
 961 static OCStackApplicationResult SRPProvisionDirectPairingCB(void *ctx, OCDoHandle UNUSED,
 962                                                   OCClientResponse *clientResponse)
 963 {
 964     OIC_LOG_V(INFO, TAG, "Inside SRPProvisionDirectPairingCB.");
 965     (void)UNUSED;
 966     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
 967     PconfData_t *pconfData = (PconfData_t*)ctx;
 968     OCProvisionResultCB resultCallback = pconfData->resultCallback;
 969
 970     if (clientResponse)
 971     {
 972         if(OC_STACK_RESOURCE_CREATED == clientResponse->result)
 973         {
 974             registerResultForDirectPairingProvisioning(pconfData, OC_STACK_OK);
 975             ((OCProvisionResultCB)(resultCallback))(pconfData->ctx, pconfData->numOfResults,
 976                                                     pconfData->resArr,
 977                                                     false);
 978              OICFree(pconfData->resArr);
 979              OICFree(pconfData);
 980              return OC_STACK_DELETE_TRANSACTION;
 981         }
 982     }
 983     registerResultForDirectPairingProvisioning(pconfData, OC_STACK_ERROR);
 984     ((OCProvisionResultCB)(resultCallback))(pconfData->ctx, pconfData->numOfResults,
 985                                             pconfData->resArr,
 986                                             true);
 987     OIC_LOG_V(ERROR, TAG, "SRPProvisionDirectPairingCB received Null clientResponse");
 988     OICFree(pconfData->resArr);
 989     OICFree(pconfData);
 990     return OC_STACK_DELETE_TRANSACTION;
 991 }
 992
 993 OCStackResult SRPProvisionDirectPairing(void *ctx, const OCProvisionDev_t *selectedDeviceInfo,
 994         OicSecPconf_t *pconf, OCProvisionResultCB resultCallback)
 995 {
 996     VERIFY_NON_NULL(TAG, selectedDeviceInfo, ERROR,  OC_STACK_INVALID_PARAM);
 997     VERIFY_NON_NULL(TAG, pconf, ERROR,  OC_STACK_INVALID_PARAM);
 998     VERIFY_NON_NULL(TAG, resultCallback, ERROR,  OC_STACK_INVALID_CALLBACK);
 999
1000     // check direct-pairing capability
1001     if (true != selectedDeviceInfo->doxm->dpc)
1002     {
1003         OIC_LOG(ERROR, TAG, "Resouce server does not have Direct-Pairing Capability ");
1004         return OC_STACK_UNAUTHORIZED_REQ;
1005     }
1006
1007     OicUuid_t provTooldeviceID =   {.id={0}};
1008     if (OC_STACK_OK != GetDoxmDeviceID(&provTooldeviceID))
1009     {
1010         OIC_LOG(ERROR, TAG, "Error while retrieving provisioning tool's device ID");
1011         return OC_STACK_ERROR;
1012     }
1013     memcpy(&pconf->rownerID, &provTooldeviceID, sizeof(OicUuid_t));
1014
1015     OCSecurityPayload* secPayload = (OCSecurityPayload*)OICCalloc(1, sizeof(OCSecurityPayload));
1016     if(!secPayload)
1017     {
1018         OIC_LOG(ERROR, TAG, "Failed to memory allocation");
1019         return OC_STACK_NO_MEMORY;
1020     }
1021     secPayload->base.type = PAYLOAD_TYPE_SECURITY;
1022
1023     if (OC_STACK_OK != PconfToCBORPayload(pconf, &(secPayload->securityData),
1024                 &(secPayload->payloadSize)))
1025     {
1026         OCPayloadDestroy((OCPayload*)secPayload);
1027         OIC_LOG(ERROR, TAG, "Failed to PconfToCborPayload");
1028         return OC_STACK_NO_MEMORY;
1029     }
1030     OIC_LOG(DEBUG, TAG, "Created payload for pconf set");
1031     OIC_LOG_BUFFER(DEBUG, TAG, secPayload->securityData, secPayload->payloadSize);
1032
1033
1034     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1035     if(!PMGenerateQuery(true,
1036                 selectedDeviceInfo->endpoint.addr,
1037                 selectedDeviceInfo->securePort,
1038                 selectedDeviceInfo->connType,
1039                 query, sizeof(query), OIC_RSRC_PCONF_URI))
1040     {
1041         OIC_LOG(ERROR, TAG, "SRPProvisionDirectPairing : Failed to generate query");
1042         return OC_STACK_ERROR;
1043     }
1044     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1045
1046     OCCallbackData cbData =  {.context=NULL, .cb=NULL, .cd=NULL};
1047     cbData.cb = &SRPProvisionDirectPairingCB;
1048     PconfData_t *pconfData = (PconfData_t *) OICCalloc(1, sizeof(PconfData_t));
1049     if (NULL == pconfData)
1050     {
1051         OCPayloadDestroy((OCPayload*)secPayload);
1052         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
1053         return OC_STACK_NO_MEMORY;
1054     }
1055     pconfData->deviceInfo = selectedDeviceInfo;
1056     pconfData->resultCallback = resultCallback;
1057     pconfData->numOfResults=0;
1058     pconfData->ctx = ctx;
1059     // call to provision PCONF to device1.
1060     int noOfRiCalls = 1;
1061     pconfData->resArr = (OCProvisionResult_t*)OICCalloc(noOfRiCalls, sizeof(OCProvisionResult_t));
1062     if (NULL == pconfData->resArr)
1063     {
1064         OICFree(pconfData);
1065         OCPayloadDestroy((OCPayload*)secPayload);
1066         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
1067         return OC_STACK_NO_MEMORY;
1068     }
1069     cbData.context = (void *)pconfData;
1070     cbData.cd = NULL;
1071     OCMethod method = OC_REST_POST;
1072     OCDoHandle handle = NULL;
1073     OIC_LOG(DEBUG, TAG, "Sending PCONF info to resource server");
1074     OCStackResult ret = OCDoResource(&handle, method, query,
1075             &selectedDeviceInfo->endpoint, (OCPayload*)secPayload,
1076             selectedDeviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
1077     if (OC_STACK_OK != ret)
1078     {
1079         OICFree(pconfData->resArr);
1080         OICFree(pconfData);
1081     }
1082     VERIFY_SUCCESS(TAG, (OC_STACK_OK == ret), ERROR, OC_STACK_ERROR);
1083     return OC_STACK_OK;
1084 }
1085
1086 static void DeleteUnlinkData_t(UnlinkData_t *unlinkData)
1087 {
1088     if (unlinkData)
1089     {
1090         OICFree(unlinkData->unlinkDev);
1091         OICFree(unlinkData->unlinkRes);
1092         OICFree(unlinkData);
1093     }
1094 }
1095
1096 static void registerResultForUnlinkDevices(UnlinkData_t *unlinkData, OCStackResult stackresult,
1097                                            IdxUnlinkRes_t idx)
1098 {
1099     if (NULL != unlinkData)
1100     {
1101         OIC_LOG_V(INFO, TAG, "Inside registerResultForUnlinkDevices unlinkData->numOfResults is %d\n",
1102                             unlinkData->numOfResults);
1103         OIC_LOG_V(INFO, TAG, "Stack result :: %d", stackresult);
1104
1105         OicUuid_t *pUuid = &unlinkData->unlinkRes[(unlinkData->numOfResults)].deviceId;
1106
1107         // Set result in the result array according to the position (devNum).
1108         if (idx != IDX_DB_UPDATE_RES)
1109         {
1110             memcpy(pUuid->id, unlinkData->unlinkDev[idx].doxm->deviceID.id, sizeof(pUuid->id));
1111         }
1112         else
1113         {   // When deivce ID is 000... this means it's the result of database update.
1114             memset(pUuid->id, 0, sizeof(pUuid->id));
1115         }
1116         unlinkData->unlinkRes[(unlinkData->numOfResults)].res = stackresult;
1117         ++(unlinkData->numOfResults);
1118         OIC_LOG (INFO, TAG, "Out registerResultForUnlinkDevices");
1119     }
1120 }
1121
1122 static OCStackResult SendDeleteCredentialRequest(void* ctx,
1123                                                  OCClientResponseHandler respHandler,
1124                                                  const OCProvisionDev_t* revokedDev,
1125                                                  const OCProvisionDev_t* destDev)
1126 {
1127     OIC_LOG(DEBUG, TAG, "IN SendDeleteCredentialRequest");
1128
1129     if (NULL == ctx || NULL == respHandler || NULL == revokedDev || NULL == destDev)
1130     {
1131         return OC_STACK_INVALID_PARAM;
1132     }
1133
1134     char *subID = NULL;
1135     OCStackResult ret = ConvertUuidToStr(&revokedDev->doxm->deviceID, &subID);
1136     if(OC_STACK_OK != ret)
1137     {
1138         OIC_LOG(ERROR, TAG, "SendDeleteCredentialRequest : Failed to canonical UUID encoding");
1139         return OC_STACK_ERROR;
1140     }
1141
1142     char reqBuf[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1143     int snRet = 0;
1144                     //coaps://0.0.0.0:5684/oic/sec/cred?subjectid=(Canonical ENCODED UUID)
1145     snRet = snprintf(reqBuf, sizeof(reqBuf), SRP_FORM_DELETE_CREDENTIAL, destDev->endpoint.addr,
1146                      destDev->securePort, OIC_RSRC_CRED_URI, OIC_JSON_SUBJECTID_NAME, subID);
1147     OICFree(subID);
1148     if (snRet < 0)
1149     {
1150         OIC_LOG_V(ERROR, TAG, "SendDeleteCredentialRequest : Error (snprintf) %d\n", snRet);
1151         return OC_STACK_ERROR;
1152     }
1153     else if ((size_t)snRet >= sizeof(reqBuf))
1154     {
1155         OIC_LOG_V(ERROR, TAG, "SendDeleteCredentialRequest : Truncated (snprintf) %d\n", snRet);
1156         return OC_STACK_ERROR;
1157     }
1158
1159     OCCallbackData cbData;
1160     memset(&cbData, 0, sizeof(cbData));
1161     cbData.context = ctx;
1162     cbData.cb = respHandler;
1163     cbData.cd = NULL;
1164     OIC_LOG_V(INFO, TAG, "URI: %s",reqBuf);
1165
1166     OIC_LOG(DEBUG, TAG, "Sending remove credential request to resource server");
1167
1168     ret = OCDoResource(NULL, OC_REST_DELETE, reqBuf,
1169                                      &destDev->endpoint, NULL,
1170                                      CT_ADAPTER_IP, OC_HIGH_QOS, &cbData, NULL, 0);
1171     if (OC_STACK_OK != ret)
1172     {
1173         OIC_LOG_V(ERROR, TAG, "SendDeleteCredentialRequest : Error in OCDoResource %d", ret);
1174     }
1175     OIC_LOG(DEBUG, TAG, "OUT SendDeleteCredentialRequest");
1176
1177     return ret;
1178 }
1179
1180 /**
1181  * Callback handler of unlink second device.
1182  *
1183  * @param[in] ctx             ctx value passed to callback from calling function.
1184  * @param[in] handle          handle to an invocation
1185  * @param[in] clientResponse  Response from queries to remote servers.
1186  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction and
1187  *          OC_STACK_KEEP_TRANSACTION to keep it.
1188  */
1189 static OCStackApplicationResult SRPUnlinkDevice2CB(void *unlinkCtx, OCDoHandle handle,
1190         OCClientResponse *clientResponse)
1191 {
1192     (void) handle;
1193     OIC_LOG(DEBUG, TAG, "IN SRPUnlinkDevice2CB");
1194     VERIFY_NON_NULL(TAG, unlinkCtx, ERROR, OC_STACK_DELETE_TRANSACTION);
1195     UnlinkData_t* unlinkData = (UnlinkData_t*)unlinkCtx;
1196
1197     if (clientResponse)
1198     {
1199         OIC_LOG(DEBUG, TAG, "Valid client response for device 2");
1200         registerResultForUnlinkDevices(unlinkData, clientResponse->result, IDX_SECOND_DEVICE_RES);
1201
1202         if (OC_STACK_RESOURCE_DELETED == clientResponse->result)
1203         {
1204             OIC_LOG(DEBUG, TAG, "Credential of device2 revoked");
1205         }
1206         else
1207         {
1208             OIC_LOG(ERROR, TAG, "Unable to delete credential information from device 2");
1209             unlinkData->resultCallback(unlinkData->ctx,
1210                                        unlinkData->numOfResults, unlinkData->unlinkRes, true);
1211             goto error;
1212         }
1213     }
1214     else
1215     {
1216         registerResultForUnlinkDevices(unlinkData, OC_STACK_INVALID_REQUEST_HANDLE,
1217                                        IDX_SECOND_DEVICE_RES);
1218         unlinkData->resultCallback(unlinkData->ctx,
1219                                    unlinkData->numOfResults, unlinkData->unlinkRes, true);
1220         OIC_LOG(ERROR, TAG, "SRPUnlinkDevice2CB received Null clientResponse");
1221         goto error;
1222     }
1223
1224     //Update provisioning DB when succes case.
1225     if (OC_STACK_OK != PDMUnlinkDevices(&unlinkData->unlinkDev[0].doxm->deviceID,
1226                                        &unlinkData->unlinkDev[1].doxm->deviceID))
1227     {
1228         OIC_LOG(FATAL, TAG, "All requests are successfully done but update provisioning DB FAILED.");
1229         registerResultForUnlinkDevices(unlinkData, OC_STACK_INCONSISTENT_DB, IDX_DB_UPDATE_RES);
1230         unlinkData->resultCallback(unlinkData->ctx,
1231                                    unlinkData->numOfResults, unlinkData->unlinkRes, true);
1232         goto error;
1233     }
1234     unlinkData->resultCallback(unlinkData->ctx, unlinkData->numOfResults, unlinkData->unlinkRes,
1235                                false);
1236
1237 error:
1238     DeleteUnlinkData_t(unlinkData);
1239     OIC_LOG(DEBUG, TAG, "OUT SRPUnlinkDevice2CB");
1240     return OC_STACK_DELETE_TRANSACTION;
1241
1242 }
1243
1244 /**
1245  * Callback handler of unlink first device.
1246  *
1247  * @param[in] ctx             ctx value passed to callback from calling function.
1248  * @param[in] handle          handle to an invocation
1249  * @param[in] clientResponse  Response from queries to remote servers.
1250  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction and
1251  *          OC_STACK_KEEP_TRANSACTION to keep it.
1252  */
1253 static OCStackApplicationResult SRPUnlinkDevice1CB(void *unlinkCtx, OCDoHandle handle,
1254         OCClientResponse *clientResponse)
1255 {
1256     OIC_LOG_V(INFO, TAG, "Inside SRPUnlinkDevice1CB ");
1257     VERIFY_NON_NULL(TAG, unlinkCtx, ERROR, OC_STACK_DELETE_TRANSACTION);
1258     UnlinkData_t* unlinkData = (UnlinkData_t*)unlinkCtx;
1259     (void) handle;
1260
1261     if (clientResponse)
1262     {
1263         OIC_LOG(DEBUG, TAG, "Valid client response for device 1");
1264         registerResultForUnlinkDevices(unlinkData, clientResponse->result, IDX_FIRST_DEVICE_RES);
1265
1266         if (OC_STACK_RESOURCE_DELETED == clientResponse->result)
1267         {
1268             OIC_LOG(DEBUG, TAG, "Credential of device 1 is revoked");
1269
1270             // Second revocation request to second device.
1271             OCStackResult res = SendDeleteCredentialRequest((void*)unlinkData, &SRPUnlinkDevice2CB,
1272                                                     &unlinkData->unlinkDev[0],
1273                                                     &unlinkData->unlinkDev[1] /*Dest*/);
1274             OIC_LOG_V(DEBUG, TAG, "Credential revocation request device 2, result :: %d",res);
1275             if (OC_STACK_OK != res)
1276             {
1277                  OIC_LOG(ERROR, TAG, "Error while sending revocation request for device 2");
1278                  registerResultForUnlinkDevices(unlinkData, OC_STACK_INVALID_REQUEST_HANDLE,
1279                                                 IDX_SECOND_DEVICE_RES);
1280                  unlinkData->resultCallback(unlinkData->ctx,
1281                                             unlinkData->numOfResults, unlinkData->unlinkRes, true);
1282                  goto error;
1283             }
1284             else
1285             {
1286                 OIC_LOG(DEBUG, TAG, "Request for credential revocation successfully sent");
1287                 return OC_STACK_DELETE_TRANSACTION;
1288             }
1289         }
1290         else
1291         {
1292             OIC_LOG(ERROR, TAG, "Unable to delete credential information from device 1");
1293
1294             unlinkData->resultCallback(unlinkData->ctx, unlinkData->numOfResults,
1295                                             unlinkData->unlinkRes, true);
1296             goto error;
1297         }
1298     }
1299     else
1300     {
1301         OIC_LOG(DEBUG, TAG, "Invalid response from server");
1302         registerResultForUnlinkDevices(unlinkData, OC_STACK_INVALID_REQUEST_HANDLE,
1303                                        IDX_FIRST_DEVICE_RES );
1304         unlinkData->resultCallback(unlinkData->ctx,
1305                                    unlinkData->numOfResults, unlinkData->unlinkRes,
1306                                    true);
1307         OIC_LOG(ERROR, TAG, "SRPUnlinkDevice1CB received Null clientResponse");
1308     }
1309
1310 error:
1311     OIC_LOG_V(INFO, TAG, "Out SRPUnlinkDevice1CB");
1312     DeleteUnlinkData_t(unlinkData);
1313     return OC_STACK_DELETE_TRANSACTION;
1314 }
1315
1316 /*
1317 * Function to unlink devices.
1318 * This function will remove the credential & relationship between the two devices.
1319 *
1320 * @param[in] ctx Application context would be returned in result callback
1321 * @param[in] pTargetDev1 first device information to be unlinked.
1322 * @param[in] pTargetDev2 second device information to be unlinked.
1323 * @param[in] resultCallback callback provided by API user, callback will be called when
1324 *            device unlink is finished.
1325  * @return  OC_STACK_OK in case of success and other value otherwise.
1326 */
1327 OCStackResult SRPUnlinkDevices(void* ctx,
1328                                const OCProvisionDev_t* pTargetDev1,
1329                                const OCProvisionDev_t* pTargetDev2,
1330                                OCProvisionResultCB resultCallback)
1331 {
1332     OIC_LOG(INFO, TAG, "IN SRPUnlinkDevices");
1333
1334     if (!pTargetDev1 || !pTargetDev2 || !pTargetDev1->doxm || !pTargetDev2->doxm)
1335     {
1336         OIC_LOG(INFO, TAG, "SRPUnlinkDevices : NULL parameters");
1337         return OC_STACK_INVALID_PARAM;
1338     }
1339     if (!resultCallback)
1340     {
1341         OIC_LOG(INFO, TAG, "SRPUnlinkDevices : NULL Callback");
1342         return OC_STACK_INVALID_CALLBACK;
1343     }
1344     if (0 == memcmp(&pTargetDev1->doxm->deviceID, &pTargetDev2->doxm->deviceID, sizeof(OicUuid_t)))
1345     {
1346         OIC_LOG(INFO, TAG, "SRPUnlinkDevices : Same device ID");
1347         return OC_STACK_INVALID_PARAM;
1348     }
1349
1350     OIC_LOG(INFO, TAG, "Unlinking following devices: ");
1351     PMPrintOCProvisionDev(pTargetDev1);
1352     PMPrintOCProvisionDev(pTargetDev2);
1353
1354     // Mark the link status stale
1355     OCStackResult res = PDMSetLinkStale(&pTargetDev1->doxm->deviceID, &pTargetDev2->doxm->deviceID);
1356     if (OC_STACK_OK != res)
1357     {
1358         OIC_LOG(FATAL, TAG, "unable to update DB. Try again.");
1359         return res;
1360     }
1361
1362     UnlinkData_t* unlinkData = (UnlinkData_t*)OICCalloc(1, sizeof(UnlinkData_t));
1363     VERIFY_NON_NULL(TAG, unlinkData, ERROR, OC_STACK_NO_MEMORY);
1364
1365     //Initialize unlink data
1366     unlinkData->ctx = ctx;
1367     unlinkData->unlinkDev = (OCProvisionDev_t*)OICCalloc(2, sizeof(OCProvisionDev_t));
1368     if (NULL == unlinkData->unlinkDev)
1369     {
1370         OIC_LOG(ERROR, TAG, "Memory allocation failed");
1371         res = OC_STACK_NO_MEMORY;
1372         goto error;
1373     }
1374
1375     unlinkData->unlinkRes = (OCProvisionResult_t*)OICCalloc(3, sizeof(OCProvisionResult_t));
1376     if (NULL == unlinkData->unlinkRes)
1377     {
1378         OIC_LOG(ERROR, TAG, "Memory allocation failed");
1379         res = OC_STACK_NO_MEMORY;
1380         goto error;
1381     }
1382
1383     memcpy(&unlinkData->unlinkDev[0], pTargetDev1, sizeof(OCProvisionDev_t));
1384     memcpy(&unlinkData->unlinkDev[1], pTargetDev2, sizeof(OCProvisionDev_t));
1385
1386     unlinkData->numOfResults = 0;
1387     unlinkData->resultCallback = resultCallback;
1388
1389     res = SendDeleteCredentialRequest((void*)unlinkData, &SRPUnlinkDevice1CB,
1390                                        &unlinkData->unlinkDev[1], &unlinkData->unlinkDev[0]);
1391     if (OC_STACK_OK != res)
1392     {
1393         OIC_LOG(ERROR, TAG, "SRPUnlinkDevices : SendDeleteCredentialRequest failed");
1394         goto error;
1395     }
1396
1397     return res;
1398
1399 error:
1400     OIC_LOG(INFO, TAG, "OUT SRPUnlinkDevices");
1401     DeleteUnlinkData_t(unlinkData);
1402     return res;
1403 }
1404
1405 static void DeleteRemoveData_t(RemoveData_t* pRemoveData)
1406 {
1407     if (pRemoveData)
1408     {
1409         OICFree(pRemoveData->revokeTargetDev);
1410         OCDeleteDiscoveredDevices(pRemoveData->linkedDevList);
1411         OICFree(pRemoveData->removeRes);
1412         OICFree(pRemoveData);
1413     }
1414 }
1415
1416 static void registerResultForRemoveDevice(RemoveData_t *removeData, OicUuid_t *pLinkedDevId,
1417                                           OCStackResult stackresult, bool hasError)
1418 {
1419     OIC_LOG_V(INFO, TAG, "Inside registerResultForRemoveDevice removeData->numOfResults is %zu\n",
1420                          removeData->numOfResults + 1);
1421     if (pLinkedDevId)
1422     {
1423         memcpy(removeData->removeRes[(removeData->numOfResults)].deviceId.id,
1424                &pLinkedDevId->id, sizeof(pLinkedDevId->id));
1425     }
1426     else
1427     {
1428         memset(removeData->removeRes[(removeData->numOfResults)].deviceId.id,
1429                0, sizeof(pLinkedDevId->id) );
1430     }
1431     removeData->removeRes[(removeData->numOfResults)].res = stackresult;
1432     removeData->hasError = hasError;
1433     ++(removeData->numOfResults);
1434
1435     // If we get suffcient result from linked devices, we have to call user callback and do free
1436     if (removeData->sizeOfResArray == removeData->numOfResults)
1437     {
1438         if(!removeData->hasError)
1439         {
1440             // Remove device info from prvisioning database
1441             if (OC_STACK_OK != PDMDeleteDevice(&removeData->revokeTargetDev->doxm->deviceID))
1442             {
1443                 OIC_LOG(ERROR, TAG, "ResultForRemoveDevice : Failed to remove device in PDM.");
1444                 removeData->hasError = true;
1445             }
1446         }
1447         removeData->resultCallback(removeData->ctx, removeData->numOfResults, removeData->removeRes,
1448                                    removeData->hasError);
1449         DeleteRemoveData_t(removeData);
1450     }
1451  }
1452
1453 /**
1454  * Callback handler of unlink first device.
1455  *
1456  * @param[in] ctx             ctx value passed to callback from calling function.
1457  * @param[in] handle          handle to an invocation
1458  * @param[in] clientResponse  Response from queries to remote servers.
1459  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
1460  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
1461  */
1462 static OCStackApplicationResult SRPRemoveDeviceCB(void *delDevCtx, OCDoHandle handle,
1463         OCClientResponse *clientResponse)
1464 {
1465     //Update the delete credential into delete device context
1466     //Save the deleted status in delDevCtx
1467     (void)handle;
1468     OIC_LOG_V(INFO, TAG, "Inside SRPRemoveDeviceCB.");
1469     VERIFY_NON_NULL(TAG, delDevCtx, ERROR, OC_STACK_DELETE_TRANSACTION);
1470     OCStackResult res = OC_STACK_ERROR;
1471
1472     RemoveData_t* removeData = (RemoveData_t*)delDevCtx;
1473
1474     if (clientResponse)
1475     {
1476         OicUuid_t revDevUuid = {.id={0}};
1477         if(UUID_LENGTH == clientResponse->identity.id_length)
1478         {
1479             memcpy(revDevUuid.id, clientResponse->identity.id, sizeof(revDevUuid.id));
1480             if (OC_STACK_RESOURCE_DELETED == clientResponse->result)
1481             {
1482                 res = PDMUnlinkDevices(&removeData->revokeTargetDev->doxm->deviceID, &revDevUuid);
1483                 if (OC_STACK_OK != res)
1484                 {
1485                     OIC_LOG(ERROR, TAG, "PDMSetLinkStale() FAIL: PDB is an obsolete one.");
1486                            registerResultForRemoveDevice(removeData, &revDevUuid,
1487                            OC_STACK_INCONSISTENT_DB, true);
1488
1489                     return OC_STACK_DELETE_TRANSACTION;
1490                 }
1491
1492                 registerResultForRemoveDevice(removeData, &revDevUuid,
1493                                               OC_STACK_RESOURCE_DELETED, false);
1494             }
1495             else
1496             {
1497                 registerResultForRemoveDevice(removeData, &revDevUuid,
1498                                               clientResponse->result, true);
1499                 OIC_LOG(ERROR, TAG, "Unexpected result from DELETE credential request!");
1500             }
1501         }
1502         else
1503         {
1504             OIC_LOG_V(WARNING, TAG, "Incorrect length of device UUID was sent from %s:%d",
1505                      clientResponse->devAddr.addr, clientResponse->devAddr.port);
1506
1507             if (OC_STACK_RESOURCE_DELETED == clientResponse->result)
1508             {
1509                 /**
1510                   * Since server's credential was deleted,
1511                   * register result as OC_STACK_INCONSISTENT_DB with NULL UUID.
1512                   */
1513                 OIC_LOG_V(ERROR, TAG, "But server's credential was deleted.");
1514                 registerResultForRemoveDevice(removeData, NULL, OC_STACK_INCONSISTENT_DB, true);
1515             }
1516             else
1517             {
1518                 registerResultForRemoveDevice(removeData, NULL, clientResponse->result, true);
1519             }
1520         }
1521     }
1522     else
1523     {
1524         registerResultForRemoveDevice(removeData, NULL, OC_STACK_ERROR, true);
1525         OIC_LOG(ERROR, TAG, "SRPRemoveDevices received Null clientResponse");
1526     }
1527
1528
1529     return OC_STACK_DELETE_TRANSACTION;
1530 }
1531
1532 static OCStackResult GetListofDevToReqDeleteCred(const OCProvisionDev_t* pRevokeTargetDev,
1533                                                  OCProvisionDev_t* pOwnedDevList,
1534                                                  OCUuidList_t* pLinkedUuidList,
1535                                                  OCProvisionDev_t** ppLinkedDevList,
1536                                                  size_t *numOfLinkedDev)
1537 {
1538     // pOwnedDevList could be NULL. It means no alived and owned device now.
1539     if (pRevokeTargetDev == NULL || pLinkedUuidList == NULL ||\
1540         ppLinkedDevList == NULL || numOfLinkedDev == NULL)
1541     {
1542         return OC_STACK_INVALID_PARAM;
1543     }
1544
1545     size_t cnt = 0;
1546     OCUuidList_t *curUuid = NULL, *tmpUuid = NULL;
1547     LL_FOREACH_SAFE(pLinkedUuidList, curUuid, tmpUuid)
1548     {
1549         // Mark the link status stale.
1550         OCStackResult res = PDMSetLinkStale(&curUuid->dev, &pRevokeTargetDev->doxm->deviceID);
1551         if (OC_STACK_OK != res)
1552         {
1553             OIC_LOG(FATAL, TAG, "PDMSetLinkStale() FAIL: PDB is an obsolete one.");
1554             return OC_STACK_INCONSISTENT_DB;
1555         }
1556
1557         if (pOwnedDevList)
1558         {
1559             // If this linked device is alive (power-on), add the deivce to the list.
1560             OCProvisionDev_t *curDev = NULL, *tmpDev = NULL;
1561             LL_FOREACH_SAFE(pOwnedDevList, curDev, tmpDev)
1562             {
1563                 if (memcmp(curDev->doxm->deviceID.id, curUuid->dev.id, sizeof(curUuid->dev.id)) == 0)
1564                 {
1565                     OCProvisionDev_t* targetDev = PMCloneOCProvisionDev(curDev);
1566                     if (NULL == targetDev)
1567                     {
1568                         OIC_LOG(ERROR, TAG, "SRPRemoveDevice : Cloning OCProvisionDev_t Failed.");
1569                         return OC_STACK_NO_MEMORY;
1570                     }
1571
1572                     LL_PREPEND(*ppLinkedDevList, targetDev);
1573                     cnt++;
1574                     break;
1575                 }
1576             }
1577         }
1578     }
1579     *numOfLinkedDev = cnt;
1580     return OC_STACK_OK;
1581 }
1582
1583 /*
1584 * Function to device revocation
1585 * This function will remove credential of target device from all devices in subnet.
1586 *
1587 * @param[in] ctx Application context would be returned in result callback
1588 * @param[in] waitTimeForOwnedDeviceDiscovery Maximum wait time for owned device discovery.(seconds)
1589 * @param[in] pTargetDev Device information to be revoked.
1590 * @param[in] resultCallback callback provided by API user, callback will be called when
1591 *            credential revocation is finished.
1592 * @return  OC_STACK_OK in case of success and other value otherwise.
1593 *          If OC_STACK_OK is returned, the caller of this API should wait for callback.
1594 *          OC_STACK_CONTINUE means operation is success but no request is need to be initiated.
1595 */
1596 OCStackResult SRPRemoveDevice(void* ctx, unsigned short waitTimeForOwnedDeviceDiscovery,
1597                              const OCProvisionDev_t* pTargetDev, OCProvisionResultCB resultCallback)
1598 {
1599     OIC_LOG(INFO, TAG, "IN SRPRemoveDevice");
1600
1601     if (!pTargetDev  || 0 == waitTimeForOwnedDeviceDiscovery)
1602     {
1603         OIC_LOG(INFO, TAG, "SRPRemoveDevice : NULL parameters");
1604         return OC_STACK_INVALID_PARAM;
1605     }
1606     if (!resultCallback)
1607     {
1608         OIC_LOG(INFO, TAG, "SRPRemoveDevice : NULL Callback");
1609         return OC_STACK_INVALID_CALLBACK;
1610     }
1611
1612     // Declare variables in here to handle error cases with goto statement.
1613     OCProvisionDev_t* pOwnedDevList = NULL;
1614     OCProvisionDev_t* pLinkedDevList = NULL;
1615     RemoveData_t* removeData = NULL;
1616
1617     //1. Find all devices that has a credential of the revoked device
1618     OCUuidList_t* pLinkedUuidList = NULL;
1619     size_t numOfDevices = 0;
1620     OCStackResult res = OC_STACK_ERROR;
1621     res = PDMGetLinkedDevices(&pTargetDev->doxm->deviceID, &pLinkedUuidList, &numOfDevices);
1622     if (OC_STACK_OK != res)
1623     {
1624         OIC_LOG(ERROR, TAG, "SRPRemoveDevice : Failed to get linked devices information");
1625         return res;
1626     }
1627     // if there is no related device, we can skip further process.
1628     if (0 == numOfDevices)
1629     {
1630         OIC_LOG(DEBUG, TAG, "SRPRemoveDevice : No linked device found.");
1631         res = OC_STACK_CONTINUE;
1632         goto error;
1633     }
1634
1635     //2. Find owned device from the network
1636     res = PMDeviceDiscovery(waitTimeForOwnedDeviceDiscovery, true, &pOwnedDevList);
1637     if (OC_STACK_OK != res)
1638     {
1639         OIC_LOG(ERROR, TAG, "SRPRemoveDevice : Failed to PMDeviceDiscovery");
1640         goto error;
1641     }
1642
1643     //3. Make a list of devices to send DELETE credential request
1644     //   by comparing owned devices from provisioning database with mutlicast discovery result.
1645     size_t numOfLinkedDev = 0;
1646     res = GetListofDevToReqDeleteCred(pTargetDev, pOwnedDevList, pLinkedUuidList,
1647                                       &pLinkedDevList, &numOfLinkedDev);
1648     if (OC_STACK_OK != res)
1649     {
1650         OIC_LOG(ERROR, TAG, "SRPRemoveDevice : GetListofDevToReqDeleteCred() failed");
1651         goto error;
1652     }
1653     if (0 == numOfLinkedDev) // This case means, there is linked device but it's not alive now.
1654     {                       // So we don't have to send request message.
1655         OIC_LOG(DEBUG, TAG, "SRPRemoveDevice : No alived & linked device found.");
1656         res = OC_STACK_CONTINUE;
1657         goto error;
1658     }
1659
1660     // 4. Prepare RemoveData Context data.
1661     removeData = (RemoveData_t*)OICCalloc(1, sizeof(RemoveData_t));
1662     if (!removeData)
1663     {
1664         OIC_LOG(ERROR, TAG, "SRPRemoveDevices : Failed to memory allocation");
1665         res = OC_STACK_NO_MEMORY;
1666         goto error;
1667     }
1668
1669     removeData->revokeTargetDev = PMCloneOCProvisionDev(pTargetDev);
1670     if (!removeData->revokeTargetDev)
1671     {
1672         OIC_LOG(ERROR, TAG, "SRPRemoveDevices : PMCloneOCProvisionDev Failed");
1673         res = OC_STACK_NO_MEMORY;
1674         goto error;
1675     }
1676
1677     removeData->removeRes =
1678         (OCProvisionResult_t*)OICCalloc(numOfLinkedDev, sizeof(OCProvisionResult_t));
1679     if (!removeData->removeRes)
1680     {
1681         OIC_LOG(ERROR, TAG, "SRPRemoveDevices : Failed to memory allocation");
1682         res = OC_STACK_NO_MEMORY;
1683         goto error;
1684     }
1685
1686     removeData->ctx = ctx;
1687     removeData->linkedDevList = pLinkedDevList;
1688     removeData->resultCallback = resultCallback;
1689     removeData->numOfResults = 0;
1690     removeData->sizeOfResArray = numOfLinkedDev;
1691     removeData->hasError = false;
1692
1693     // 5. Send DELETE credential request to linked devices.
1694     OCProvisionDev_t *curDev = NULL, *tmpDev = NULL;
1695     OCStackResult totalRes = OC_STACK_ERROR;  /* variable for checking request is sent or not */
1696     LL_FOREACH_SAFE(pLinkedDevList, curDev, tmpDev)
1697     {
1698         res = SendDeleteCredentialRequest((void*)removeData, &SRPRemoveDeviceCB,
1699                                            removeData->revokeTargetDev, curDev);
1700         if (OC_STACK_OK != res)
1701         {
1702             OIC_LOG_V(ERROR, TAG, "SRPRemoveDevice : Fail to send the DELETE credential request to\
1703                      %s:%u", curDev->endpoint.addr, curDev->endpoint.port);
1704         }
1705         else
1706         {
1707             totalRes = OC_STACK_OK; // This means at least one request is successfully sent.
1708         }
1709     }
1710
1711     PDMDestoryOicUuidLinkList(pLinkedUuidList); //TODO: Modify API name to have unified convention.
1712     PMDeleteDeviceList(pOwnedDevList);
1713     OIC_LOG(INFO, TAG, "OUT SRPRemoveDevice");
1714
1715     return totalRes; // Caller of this API should wait callback if totalRes == OC_STACK_OK.
1716
1717 error:
1718     PDMDestoryOicUuidLinkList(pLinkedUuidList);
1719     PMDeleteDeviceList(pOwnedDevList);
1720     PMDeleteDeviceList(pLinkedDevList);
1721     if (removeData)
1722     {
1723         OICFree(removeData->revokeTargetDev);
1724         OICFree(removeData->removeRes);
1725         OICFree(removeData);
1726     }
1727     OIC_LOG(INFO, TAG, "OUT ERROR case SRPRemoveDevice");
1728     return res;
1729 }
1730
1731 /**
1732  * Internal Function to store results in result array during GetCredResourceCB.
1733  */
1734 static void registerResultForGetCredResourceCB(GetSecData_t *GetSecData,
1735                                              OCStackResult stackresult)
1736 {
1737    OIC_LOG_V(INFO, TAG, "Inside registerResultForGetCredResourceCB "
1738            "GetSecData->numOfResults is %d\n", GetSecData->numOfResults);
1739    memcpy(GetSecData->resArr[(GetSecData->numOfResults)].deviceId.id,
1740           GetSecData->deviceInfo->doxm->deviceID.id, UUID_LENGTH);
1741    GetSecData->resArr[(GetSecData->numOfResults)].res = stackresult;
1742    ++(GetSecData->numOfResults);
1743 }
1744
1745 /**
1746  * Callback handler of SRPGetCredResource.
1747  *
1748  * @param[in] ctx             ctx value passed to callback from calling function.
1749  * @param[in] UNUSED          handle to an invocation
1750  * @param[in] clientResponse  Response from queries to remote servers.
1751  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
1752  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
1753  */
1754 static OCStackApplicationResult SRPGetCredResourceCB(void *ctx, OCDoHandle UNUSED,
1755                                                   OCClientResponse *clientResponse)
1756 {
1757     OIC_LOG_V(INFO, TAG, "Inside SRPGetCredResourceCB.");
1758     (void)UNUSED;
1759     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
1760     GetSecData_t *GetSecData = (GetSecData_t*)ctx;
1761     OCProvisionResultCB resultCallback = GetSecData->resultCallback;
1762
1763     if (clientResponse)
1764     {
1765         if(OC_STACK_OK == clientResponse->result)
1766         {
1767             uint8_t *payload = ((OCSecurityPayload*)clientResponse->payload)->securityData;
1768             size_t size = ((OCSecurityPayload*)clientResponse->payload)->payloadSize;
1769
1770             OIC_LOG_BUFFER(DEBUG, TAG, payload, size);
1771
1772             registerResultForGetCredResourceCB(GetSecData, OC_STACK_OK);
1773             ((OCProvisionResultCB)(resultCallback))(GetSecData->ctx, GetSecData->numOfResults,
1774                                                     GetSecData->resArr,
1775                                                     false);
1776              OICFree(GetSecData->resArr);
1777              OICFree(GetSecData);
1778
1779             return OC_STACK_DELETE_TRANSACTION;
1780         }
1781     }
1782     registerResultForGetCredResourceCB(GetSecData, OC_STACK_OK);
1783     ((OCProvisionResultCB)(resultCallback))(GetSecData->ctx, GetSecData->numOfResults,
1784                                             GetSecData->resArr,
1785                                             false);
1786     OIC_LOG_V(ERROR, TAG, "SRPGetCredResourceCB received Null clientResponse");
1787     OICFree(GetSecData->resArr);
1788     OICFree(GetSecData);
1789
1790     return OC_STACK_DELETE_TRANSACTION;
1791 }
1792
1793
1794 OCStackResult SRPGetCredResource(void *ctx, const OCProvisionDev_t *selectedDeviceInfo,
1795         OCProvisionResultCB resultCallback)
1796 {
1797     VERIFY_NON_NULL(TAG, selectedDeviceInfo, ERROR,  OC_STACK_INVALID_PARAM);
1798     VERIFY_NON_NULL(TAG, resultCallback, ERROR,  OC_STACK_INVALID_CALLBACK);
1799
1800     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1801     if(!PMGenerateQuery(true,
1802                         selectedDeviceInfo->endpoint.addr,
1803                         selectedDeviceInfo->securePort,
1804                         selectedDeviceInfo->connType,
1805                         query, sizeof(query), OIC_RSRC_CRED_URI))
1806     {
1807         OIC_LOG(ERROR, TAG, "SRPGetCredResource : Failed to generate query");
1808         return OC_STACK_ERROR;
1809     }
1810     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1811
1812     OCCallbackData cbData =  {.context=NULL, .cb=NULL, .cd=NULL};
1813     cbData.cb = &SRPGetCredResourceCB;
1814     GetSecData_t* GetSecData = (GetSecData_t*)OICCalloc(1, sizeof(GetSecData_t));
1815     if (NULL == GetSecData)
1816     {
1817         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
1818         return OC_STACK_NO_MEMORY;
1819     }
1820     GetSecData->deviceInfo = selectedDeviceInfo;
1821     GetSecData->resultCallback = resultCallback;
1822     GetSecData->numOfResults=0;
1823     GetSecData->ctx = ctx;
1824
1825     int noOfRiCalls = 1;
1826     GetSecData->resArr = (OCProvisionResult_t*)OICCalloc(noOfRiCalls, sizeof(OCProvisionResult_t));
1827     if (NULL == GetSecData->resArr)
1828     {
1829         OICFree(GetSecData);
1830         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
1831         return OC_STACK_NO_MEMORY;
1832     }
1833     cbData.context = (void *)GetSecData;
1834     cbData.cd = NULL;
1835     OCMethod method = OC_REST_GET;
1836     OCDoHandle handle = NULL;
1837     OIC_LOG(DEBUG, TAG, "Sending Get Cred to  resource server");
1838     OCStackResult ret = OCDoResource(&handle, method, query, NULL, NULL,
1839             selectedDeviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
1840     if (OC_STACK_OK != ret)
1841     {
1842         OIC_LOG(ERROR, TAG, "OCStack resource error");
1843         OICFree(GetSecData->resArr);
1844         OICFree(GetSecData);
1845     }
1846     VERIFY_SUCCESS(TAG, (OC_STACK_OK == ret), ERROR, OC_STACK_ERROR);
1847     OIC_LOG(DEBUG, TAG, "OUT SRPGetCredResource");
1848
1849     return OC_STACK_OK;
1850 }
1851
1852 /**
1853  * Internal Function to store results in result array during GetACLResourceCB.
1854  */
1855 static void registerResultForGetACLResourceCB(GetSecData_t *GetSecData,
1856                                              OCStackResult stackresult)
1857 {
1858    OIC_LOG_V(INFO, TAG, "Inside registerResultForGetACLResourceCB "
1859            "GetSecData->numOfResults is %d\n", GetSecData->numOfResults);
1860    memcpy(GetSecData->resArr[(GetSecData->numOfResults)].deviceId.id,
1861           GetSecData->deviceInfo->doxm->deviceID.id, UUID_LENGTH);
1862    GetSecData->resArr[(GetSecData->numOfResults)].res = stackresult;
1863    ++(GetSecData->numOfResults);
1864 }
1865
1866 /**
1867  * Callback handler of SRPGetACLResource.
1868  *
1869  * @param[in] ctx             ctx value passed to callback from calling function.
1870  * @param[in] UNUSED          handle to an invocation
1871  * @param[in] clientResponse  Response from queries to remote servers.
1872  * @return  OC_STACK_DELETE_TRANSACTION to delete the transaction
1873  *          and  OC_STACK_KEEP_TRANSACTION to keep it.
1874  */
1875 static OCStackApplicationResult SRPGetACLResourceCB(void *ctx, OCDoHandle UNUSED,
1876                                                   OCClientResponse *clientResponse)
1877 {
1878     OIC_LOG_V(INFO, TAG, "Inside SRPGetACLResourceCB.");
1879     (void)UNUSED;
1880     VERIFY_NON_NULL(TAG, ctx, ERROR, OC_STACK_DELETE_TRANSACTION);
1881     GetSecData_t *GetSecData = (GetSecData_t*)ctx;
1882     OCProvisionResultCB resultCallback = GetSecData->resultCallback;
1883
1884     if (clientResponse)
1885     {
1886         if(OC_STACK_OK == clientResponse->result)
1887         {
1888             uint8_t *payload = ((OCSecurityPayload*)clientResponse->payload)->securityData;
1889             size_t size = ((OCSecurityPayload*)clientResponse->payload)->payloadSize;
1890
1891             OIC_LOG_BUFFER(DEBUG, TAG, payload, size);
1892
1893             registerResultForGetACLResourceCB(GetSecData, OC_STACK_OK);
1894             ((OCProvisionResultCB)(resultCallback))(GetSecData->ctx, GetSecData->numOfResults,
1895                                                     GetSecData->resArr,
1896                                                     false);
1897              OICFree(GetSecData->resArr);
1898              OICFree(GetSecData);
1899
1900             return OC_STACK_DELETE_TRANSACTION;
1901         }
1902     }
1903     registerResultForGetACLResourceCB(GetSecData, OC_STACK_OK);
1904     ((OCProvisionResultCB)(resultCallback))(GetSecData->ctx, GetSecData->numOfResults,
1905                                             GetSecData->resArr,
1906                                             false);
1907     OIC_LOG_V(ERROR, TAG, "SRPGetACLResourceCB received Null clientResponse");
1908     OICFree(GetSecData->resArr);
1909     OICFree(GetSecData);
1910
1911     return OC_STACK_DELETE_TRANSACTION;
1912 }
1913
1914
1915 OCStackResult SRPGetACLResource(void *ctx, const OCProvisionDev_t *selectedDeviceInfo,
1916         OCProvisionResultCB resultCallback)
1917 {
1918     VERIFY_NON_NULL(TAG, selectedDeviceInfo, ERROR,  OC_STACK_INVALID_PARAM);
1919     VERIFY_NON_NULL(TAG, resultCallback, ERROR,  OC_STACK_INVALID_CALLBACK);
1920
1921     char query[MAX_URI_LENGTH + MAX_QUERY_LENGTH] = {0};
1922     if(!PMGenerateQuery(true,
1923                         selectedDeviceInfo->endpoint.addr,
1924                         selectedDeviceInfo->securePort,
1925                         selectedDeviceInfo->connType,
1926                         query, sizeof(query), OIC_RSRC_ACL_URI))
1927     {
1928         OIC_LOG(ERROR, TAG, "SRPGetACLResource : Failed to generate query");
1929         return OC_STACK_ERROR;
1930     }
1931     OIC_LOG_V(DEBUG, TAG, "Query=%s", query);
1932
1933     OCCallbackData cbData =  {.context=NULL, .cb=NULL, .cd=NULL};
1934     cbData.cb = &SRPGetACLResourceCB;
1935     GetSecData_t* GetSecData = (GetSecData_t*)OICCalloc(1, sizeof(GetSecData_t));
1936     if (NULL == GetSecData)
1937     {
1938         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
1939         return OC_STACK_NO_MEMORY;
1940     }
1941     GetSecData->deviceInfo = selectedDeviceInfo;
1942     GetSecData->resultCallback = resultCallback;
1943     GetSecData->numOfResults=0;
1944     GetSecData->ctx = ctx;
1945
1946     int noOfRiCalls = 1;
1947     GetSecData->resArr = (OCProvisionResult_t*)OICCalloc(noOfRiCalls, sizeof(OCProvisionResult_t));
1948     if (NULL == GetSecData->resArr)
1949     {
1950         OICFree(GetSecData);
1951         OIC_LOG(ERROR, TAG, "Unable to allocate memory");
1952         return OC_STACK_NO_MEMORY;
1953     }
1954     cbData.context = (void *)GetSecData;
1955     cbData.cd = NULL;
1956     OCMethod method = OC_REST_GET;
1957     OCDoHandle handle = NULL;
1958     OIC_LOG(DEBUG, TAG, "Sending Get ACL to resource server");
1959     OCStackResult ret = OCDoResource(&handle, method, query, NULL, NULL,
1960             selectedDeviceInfo->connType, OC_HIGH_QOS, &cbData, NULL, 0);
1961     if (OC_STACK_OK != ret)
1962     {
1963         OIC_LOG(ERROR, TAG, "OCStack resource error");
1964         OICFree(GetSecData->resArr);
1965         OICFree(GetSecData);
1966     }
1967     VERIFY_SUCCESS(TAG, (OC_STACK_OK == ret), ERROR, OC_STACK_ERROR);
1968     OIC_LOG(DEBUG, TAG, "OUT SRPGetACLResource");
1969
1970     return OC_STACK_OK;
1971 }