Collapse all Symbian^3 Application Developer Library

Swi::CCertChainConstraints Class Reference

class Swi::CCertChainConstraints : public CBase

The CCertChainConstraints class is to aggregate the constraints specified in certficate extensions across all valid certificate chains and then check them against information from the device and/or information contained in the SIS file.

Inherits from

Swi::CCertChainConstraints
- CBase

Public Member Functions
	~CCertChainConstraints ()
IMPORT_C TBool	CapabilitiesAreConstrained ()
IMPORT_C TBool	CapabilitiesAreValid ( TCapabilitySet &)
IMPORT_C TBool	DeviceIDIsValid (const HBufC *)
IMPORT_C TBool	DeviceIDsAreConstrained ()
IMPORT_C CCertChainConstraints *	NewL ( RPointerArray < CPKIXCertChainBase > &)
IMPORT_C CCertChainConstraints *	NewL ()
IMPORT_C CCertChainConstraints *	NewLC ( RPointerArray < CPKIXCertChainBase > &)
IMPORT_C TBool	SIDIsValid ( TSecureId )
IMPORT_C TBool	SIDsAreConstrained ()
IMPORT_C void	SetValidCapabilities (const TCapabilitySet &)
IMPORT_C TBool	VIDIsValid ( TVendorId )
IMPORT_C TBool	VIDsAreConstrained ()
IMPORT_C const TCapabilitySet &	ValidCapabilities ()

Private Member Functions
	CCertChainConstraints ()
void	ConstructL ( RPointerArray < CPKIXCertChainBase > &)
void	RetrieveExtensionCapabilitySetL (const CX509Certificate &)
void	RetrieveExtensionDeviceIDListL (const CX509Certificate &)
void	RetrieveExtensionSIDListL (const CX509Certificate &)
void	RetrieveExtensionVIDListL (const CX509Certificate &)

Inherited Functions
	CBase::CBase()
	CBase::Delete(CBase *)
	CBase::Extension_(TUint,TAny &,TAny )
	CBase::operator new(TUint)
	CBase::operator new(TUint,TAny *)
	CBase::operator new(TUint,TLeave)
	CBase::operator new(TUint,TLeave,TUint)
	CBase::operator new(TUint,TUint)
	CBase::~CBase()

Private Attributes
TBool	iCapabilitiesAreConstrained
TBool	iDeviceIDsAreConstrained
TBool	iSIDsAreConstrained
TBool	iVIDsAreConstrained
TCapabilitySet	iValidCapabilities
RPointerArray < HBufC >	iValidDeviceIDs
RArray < TSecureId >	iValidSIDs
RArray < TVendorId >	iValidVIDs

Constructor & Destructor Documentation

CCertChainConstraints()

CCertChainConstraints

(

)

[private]

~CCertChainConstraints()

~CCertChainConstraints

(

)

Member Functions Documentation

CapabilitiesAreConstrained()

IMPORT_C TBool

CapabilitiesAreConstrained

(

)

const

The method is tell if the Capabilities are constrained or not

CapabilitiesAreValid(TCapabilitySet &)

IMPORT_C TBool

CapabilitiesAreValid

(

TCapabilitySet &

aRequestCapabilities

)

const

Determine if the request Capability set is valid.

Parameters

TCapabilitySet & aRequestCapabilities

ConstructL(RPointerArray< CPKIXCertChainBase > &)

void

ConstructL

(

RPointerArray < CPKIXCertChainBase > &

aValidCerts

)

[private]

Parameters

RPointerArray < CPKIXCertChainBase > & aValidCerts

DeviceIDIsValid(const HBufC *)

IMPORT_C TBool

DeviceIDIsValid

(

const HBufC *

aRequestDeviceID

)

const

Determine if the request Device ID is valid.

Parameters

const HBufC * aRequestDeviceID

DeviceIDsAreConstrained()

IMPORT_C TBool

DeviceIDsAreConstrained

(

)

const

The method is tell if the Device IDs are constrained or not

NewL(RPointerArray< CPKIXCertChainBase > &)

IMPORT_C CCertChainConstraints *

NewL

(

RPointerArray < CPKIXCertChainBase > &

aValidCerts

)

[static]

Constructs a new CCertChainConstraints object

Parameters

RPointerArray < CPKIXCertChainBase > & aValidCerts

a valid PKIX certificate chain

NewL()

IMPORT_C CCertChainConstraints *

NewL

(

)

[static]

Constructs a new CCertChainConstraints object with no constraints

NewLC(RPointerArray< CPKIXCertChainBase > &)

IMPORT_C CCertChainConstraints *

NewLC

(

RPointerArray < CPKIXCertChainBase > &

aValidCerts

)

[static]

Constructs a new CCertChainConstraints object and leaves it on the cleanup stack

Parameters

RPointerArray < CPKIXCertChainBase > & aValidCerts

a valid PKIX certificate chain

RetrieveExtensionCapabilitySetL(const CX509Certificate &)

void

RetrieveExtensionCapabilitySetL

(

const CX509Certificate &

aCert

)

[private]

Retrieve the constrained capability set from the certificate extension, and take the intersection of the retrieved capabilities and the existing capability constraints as the new capability constraints

Parameters

const CX509Certificate & aCert

RetrieveExtensionDeviceIDListL(const CX509Certificate &)

void

RetrieveExtensionDeviceIDListL

(

const CX509Certificate &

aCert

)

[private]

Retrieve the device IDs constraints from the certificate extension and take the intersection of the retrieved device ID constraints and the existing device ID constraints as the new device ID constraints

Parameters

const CX509Certificate & aCert

RetrieveExtensionSIDListL(const CX509Certificate &)

void

RetrieveExtensionSIDListL

(

const CX509Certificate &

aCert

)

[private]

Retrieve the SID constraints from the certificate extension and take the intersection of the retrieved SID constraints and the existing SID constraints as the new VID constraints

Parameters

const CX509Certificate & aCert

RetrieveExtensionVIDListL(const CX509Certificate &)

void

RetrieveExtensionVIDListL

(

const CX509Certificate &

aCert

)

[private]

Retrieve the VID constraints from the certificate extension and take the intersection of the retrieved VID constraints and the existing VID constraints as the new VID constraints

Parameters

const CX509Certificate & aCert

SIDIsValid(TSecureId)

IMPORT_C TBool

SIDIsValid

(

TSecureId

aRequestSID

)

const

Determine if the request SID is valid.

Parameters

TSecureId aRequestSID

a request SID

SIDsAreConstrained()

IMPORT_C TBool

SIDsAreConstrained

(

)

const

The method is tell if the SIDs are constrained or not

SetValidCapabilities(const TCapabilitySet &)

IMPORT_C void

SetValidCapabilities

(

const TCapabilitySet &

aValidCapabilities

)

Set the valid Capability set

Parameters

const TCapabilitySet & aValidCapabilities

a capability set to be set in the constaints.

VIDIsValid(TVendorId)

IMPORT_C TBool

VIDIsValid

(

TVendorId

aRequestVID

)

const

Determine if the request VID is valid.

Parameters

TVendorId aRequestVID

VIDsAreConstrained()

IMPORT_C TBool

VIDsAreConstrained

(

)

const

The method is tell if the VIDs are constrained or not

ValidCapabilities()

IMPORT_C const TCapabilitySet &

ValidCapabilities

(

)

const

The method retrieves the valid Capability Set

Member Data Documentation

TBool iCapabilitiesAreConstrained

TBool

iCapabilitiesAreConstrained

[private]

The flag that represents if the Device IDs are constrained.

TBool iDeviceIDsAreConstrained

TBool

iDeviceIDsAreConstrained

[private]

The flag that represents if the Device IDs are constrained.

TBool iSIDsAreConstrained

TBool

iSIDsAreConstrained

[private]

The flag that represents if the SIDs are constrained.

TBool iVIDsAreConstrained

TBool

iVIDsAreConstrained

[private]

The flag that represents if the VIDs are constrained.

TCapabilitySet iValidCapabilities

TCapabilitySet

iValidCapabilities

[private]

The list of valid capability set

RPointerArray< HBufC > iValidDeviceIDs

RPointerArray < HBufC >

iValidDeviceIDs

[private]

The list of valid device IDs

RArray< TSecureId > iValidSIDs

RArray < TSecureId >

iValidSIDs

[private]

The list of valid secured IDs

RArray< TVendorId > iValidVIDs

RArray < TVendorId >

iValidVIDs

[private]

The list of valid vendor IDs