/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#include <open62541/config.h>

#ifdef UA_ENABLE_ENCRYPTION

#include "custom_memory_manager.h"

#include <open62541/plugin/certificategroup.h>
#include <open62541/types.h>

/*
 * Fuzz X.509 certificate parsing utilities.
 * Tests parsing of DER-encoded certificates with various utility functions.
 * This targets the certificate validation code that processes untrusted
 * certificates from the network (OPN path).
 *
 * Byte 0: operation selector
 * Last 4 bytes: memory limit
 * Remaining: certificate data (DER format)
 */
extern "C" int
LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
    if(size <= 5)
        return 0;

    if(!UA_memoryManager_setLimitFromLast4Bytes(data, size))
        return 0;
    size -= 4;

    uint8_t op = data[0];
    data++;
    size--;

    UA_ByteString cert;
    cert.data = (UA_Byte*)(void*)data;
    cert.length = size;

    switch(op % 6) {
    case 0: {
        /* Parse subject name from certificate */
        UA_String subjectName = UA_STRING_NULL;
        UA_CertificateUtils_getSubjectName(&cert, &subjectName);
        UA_String_clear(&subjectName);
        break;
    }
    case 1: {
        /* Parse expiration date */
        UA_DateTime expiryDate = 0;
        UA_CertificateUtils_getExpirationDate(&cert, &expiryDate);
        break;
    }
    case 2: {
        /* Parse thumbprint */
        UA_String thumbprint = UA_STRING_NULL;
        UA_CertificateUtils_getThumbprint(&cert, &thumbprint);
        UA_String_clear(&thumbprint);
        break;
    }
    case 3: {
        /* Parse key size */
        size_t keySize = 0;
        UA_CertificateUtils_getKeySize(&cert, &keySize);
        break;
    }
    case 4: {
        /* Check if certificate is a CA certificate */
        UA_CertificateUtils_checkCA(&cert);
        break;
    }
    case 5: {
        /* Verify application URI */
        UA_String uri = UA_STRING((char*)"urn:test:app");
        UA_CertificateUtils_verifyApplicationUri(&cert, &uri);
        break;
    }
    }

    return 0;
}

#else /* UA_ENABLE_ENCRYPTION */

#include <stdint.h>
#include <stddef.h>

extern "C" int
LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
    (void)data;
    (void)size;
    return 0;
}

#endif