// Copyright (c) 2001-2009 Nokia Corporation and/or its subsidiary(-ies).
// All rights reserved.
// This component and the accompanying materials are made available
// under the terms of "Eclipse Public License v1.0"
// which accompanies this distribution, and is available
// at the URL "http://www.eclipse.org/legal/epl-v10.html".
//
// Initial Contributors:
// Nokia Corporation - initial contribution.
//
// Contributors:
//
// Description:
// ocsp.h
// Header specifying client interface to the OCSP module.
// 
//

#ifndef __OCSP_H__
#define __OCSP_H__

/**
 * @file
 * @publishedPartner
 * @released
 */

#include <e32base.h>
#include <signed.h>
#include <f32file.h>
#include <hash.h>
#include <x500dn.h>
#include <x509cert.h>
#include <ct/rmpointerarray.h>
#include <cctcertinfo.h>
#include <asn1enc.h>
#include <asn1dec.h>

// Enums placed in OCSP namespace
namespace OCSP
	{
	// Globally-reserved error codes - range is -7601 to -7649
	enum 
		{
		KErrTransportFailure	= -7601,
		KErrInvalidURI			= -7602,
		KErrNoCertificates		= -7603,
		KErrTransportTimeout	= -7604,
		KErrServerNotFound		= -7605
		};

	/**
	 * What we think of the response, or why we haven't got one
	 * 
	 */
	enum TStatus 
		{
		// Error in communication with server
		ETransportError = 1,

		// Internal problem processing response
		EClientInternalError = 2,

		// No OCSP server specified
		ENoServerSpecified = 3,

		// Invalid sever URI
		EInvalidURI = 4,
		
		// Timeout error
		ETimeOut = 5,
		
		// Problems understanding the response
		EMalformedResponse = 10,
		EUnknownResponseType = 11,
		EUnknownCriticalExtension = 12,

		// Unsuccessful responses from server
		EMalformedRequest = 20,
		EServerInternalError = 21,
		ETryLater = 22,
		ESignatureRequired = 23,
		EClientUnauthorised = 24,
			
		// Response validation failures
		EMissingCertificates = 30,
		EResponseSignatureValidationFailure = 31,
		
		// Time problems
		EThisUpdateTooLate = 40,
		EThisUpdateTooEarly = 41,
		ENextUpdateTooEarly = 42,
		ECertificateNotValidAtValidationTime = 43,

		// Nonce error
		ENonceMismatch = 50,

		// Response sufficiently valid to use - clients to decide if
		// missing nonce is sufficiently serious to require rejection
		EMissingNonce = 51,
		
		EValid = 100,
		};
	
	/**
	 * What does the response say about the certificates?
	 * IMPORTANT: Do not change the order these are in
	 *
	 */
	enum TResult
		{
		EGood = 10, EUnknown = 20, ERevoked = 30
		};
	}
		
class TOCSPOutcome
	{
public:
	TOCSPOutcome(OCSP::TStatus aStatus, OCSP::TResult aResult)
		: iStatus(aStatus), iResult(aResult) {};

	TOCSPOutcome()
		: iStatus(OCSP::EClientInternalError), iResult(OCSP::EUnknown) {};

	TBool operator==(const TOCSPOutcome& aRhs) const
		{ return iStatus == aRhs.iStatus && iResult == aRhs.iResult; }

	OCSP::TStatus iStatus;
	OCSP::TResult iResult;
	};


#ifndef SYMBIAN_ENABLE_SPLIT_HEADERS
#include <ocsprequestandresponse.h>
#endif

#endif // __OCSP_H__