/*

* Copyright (c) 2007-2009 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:   General utility methods for certificate handling

*

*/

#ifndef IKECERT_H

#define IKECERT_H

#include <e32base.h>

class CX500DistinguishedName;

class CX509Certificate;

/**

 *  General utility methods for certificate handling

 *

 *  Contains static methods, which can be user to check thinks from 

 *  certificates.

 *

 *  @lib IkeCert.lib

 */

class IkeCert

    {

public:	

    IMPORT_C static HBufC8* GetCertificateFieldDERL(HBufC8* aCertBfr, TInt aField);

    IMPORT_C static HBufC8* GetCertificateFieldDERL(const CX509Certificate *aCert, TInt aField);

	static TBool AltNameExistsL(const CX509Certificate *aX509Cert, const TDesC8 &aId);

	IMPORT_C static HBufC8* GetSubjectAltNameDataL(const CX509Certificate *aX509Cert, TUint8 aIkeIdType);		

	static HBufC8* BuildPkcs1v15HashL(const TDesC8 &aHashIn);

	static void CleanupSequence(TAny* aArray);

	static TInt CheckValidityPeriod(const CX509Certificate& aCert, TInt aWarningMargin, TInt aErrorMargin );		

	static TInt VerifyCertExtensionsL(const CX509Certificate& aX509Cert);			

private:		

	static TUint8* BERGetLengthL(TUint8* aP, TInt &aLen);

    }; 

#endif // IKECERT_H