/*
* Copyright (c) 2006 Nokia Corporation and/or its subsidiary(-ies). 
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:   The header file of TrustedSitesServer
*
*/



#ifndef __TRUSTEDSITESSERVER_H__
#define __TRUSTEDSITESSERVER_H__

#include <s32file.h>
#include <e32std.h>
#include <securitydefs.h>
#include <d32dbms.h>

class CTrustedSitesSession;
class CTrustedSitesConduit;
class CDevTokenServer;
/**
* Trust sites store implementation in server side
* 
 *  @lib 
 *  @since S60 3.2
*/
class CTrustedSitesServer : public CBase
    {
    public:
        
        static CTrustedSitesServer* NewL( CDevTokenServer* aServer );
        
        virtual ~CTrustedSitesServer();
        
        CTrustedSitesSession* CreateSessionL();

    public:

        /**
         * add new trust record to trust site store
         *
         * @param aCert a certificate
         * @param aSiteName trusted site name
         * @param aMessage IPC message
         * @return 
         */
        void AddL(const TDesC8& aCert, const TDesC& aSiteName, const RMessage2& aMessage );
        
        /**
         * add new trust record to trust site store, this is called internally in DeviceToken server
         *
         * @param aCert a certificate
         * @param aSiteName trusted site name
         * @return 
         */
        void AddL(const TDesC8& aCertHash, const TDesC& aSiteName );

        /**
         * check whether the given cert is trusted for the given site
         *
         * @param aCert a certificate
         * @param aSiteName trusted site name
         * @param aCertBuf
         * @param aMessage IPC message
         * @return ETrue /EFalse
         */
        TBool IsTrustedSiteL( const TDesC8& aCert, const TDesC& aSiteName, const TDesC8& aCertBuf, const RMessage2& aMessage );
        
        
        /**
         * check whether the out of date certificate is allowed for the forgiven sites
         *
         * @param aCert a certificate
         * @param aSiteName trusted site name
         * @param aCertBuf
         * @param aMessage IPC message
         * @return ETrue /EFalse
         */
        TBool IsOutOfDateAllowedL( const TDesC8& aCertHash, const TDesC& aSiteName, const RMessage2& aMessage );

        /**
         * list all of the sites for which the cert is trusted
         *
         * @param aCert a certificate
         * @param aListOfSites trusted sites' name
         * @param aMessage IPC message
         * @return ETrue /EFalse
         */
        void GetTrustedSitesL( const TDesC8& aCert, RPointerArray<HBufC>& aListOfSites, const RMessage2& aMessage);

        /**
         * Remove trust record from trust site store
         *
         * @param aCert a certificate
         * @return 
         */
        void RemoveL( const TDesC8& aCert );
        
        /**
         * Add forgiven site. The site will be forgiven for untrusted certificate
         *
         * @param aSite
         * @param aOutOfDateAllowed
         * @param aMessage IPC message
         */
        void AddForgivenSiteL(const TDesC& aSite,const TBool& aOutOfDateAllowed, const RMessage2& aMessage );
        
        /**
         * Remove all forgiven sites set by this client
         *
         * @param aMessage IPC message
         */
        void RemoveAllForgivenSitesL( const RMessage2& aMessage );
        
        
        /**
         * Remove the given site 
         * 
         * @param aMessage IPC message
         */
        void RemoveThisForgivenSiteL( const TDesC& aSite, const RMessage2& aMessage );

    private:
        
        CTrustedSitesServer( CDevTokenServer* aServer );
        
        void ConstructL();
        
        void CreateDBL();
        
        TBool IsSiteAlreadyExistL(const TInt& aCertID, const TDesC& aSiteName);
        
        TBool IsOutOfDateAllowedForTheSiteL(const TInt& aCertID, const TDesC& aSiteName);
        
        void DoAddSiteNameL(const TInt& aCertID, const TDesC& aSiteName );
        
        void DoAddCertL( const TDesC8& aCertHash );
        
        void GetCertIDL( const TDesC8& aCertHash, TInt& aCertID );
        
        void DoRemoveL(const TInt& aCertID );
        
        void DoGetTrustedSitesL( const TInt& aCertID, RPointerArray<HBufC>& aListOfSites);   
        
        const TSecurityPolicy& AddRemovePolicy() const;
        
        const TSecurityPolicy& ReadPolicy() const;
        
        void DoOverWriteOutOfDateL( const TDesC& aSite, const TBool& aOutOfDateAllowed );
        
        void DoOverWriteCertL( const TDesC& aSiteName, const TDesC8& aCertHash );

        void DoAddForgivenSiteL(const TDesC& aSite, const TBool& aOutOfDateAllowed, const TUint32& aUID );
        
        TBool IsForgivenSiteAlreadyL(const TDesC& aSite );

    private:
        
        // Conduit for marshalling/unmarshalling client communications
        CTrustedSitesConduit* iConduit;
        
        RFs iFs;
        
        RDbNamedDatabase iDatabase;
        
        CDevTokenServer* iServer; //not owned
    };

#endif //_TRUSTEDSITESSERVER_H__

//EOF