/*
* Copyright (c) 2010 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:  VPN Agile provision Crypto library
*
*/

#ifndef __AGILE_CRYPTO_H
#define __AGILE_CRYPTO_H

#include "pkiserviceapi.h"


const TInt KAgileCryptoMaxSignatureLth = 512; //publicKey->Size() / 8;

typedef TPKIKeyIdentifier TPrivKeyRef;
typedef HBufC8*           TRetBufCertReq;
typedef HBufC8*           TRetBufCertRef;
typedef TInt              TErrCode;

// --- agile crypto error codes
const TInt KAgileErrCryptoCertFileNotFound            = -102101;
const TInt KAgileErrCryptoReadCertRequestFailed       = -102103;


class CAgileCryptoCert : public CBase
/** 
* Certificate operations
* @internalComponent
*/
{
public:
    
     
    IMPORT_C static CAgileCryptoCert* NewL(const TDesC8& aCert, TBool aBase64Encoded);
    IMPORT_C ~CAgileCryptoCert();                      //agile_crypto_cert_free

    IMPORT_C void SaveCACertL(void);    
    IMPORT_C void SaveClientCertL(const TPrivKeyRef& aKeyId, TUint aKeySize);
    
private:
    CAgileCryptoCert();
  
    void ConstructL(const TDesC8& aCert, TBool aBase64Encoded);
    
    
private:
    HBufC8              *iCertDER;
    
};

class CAgileCryptoGenerateKeypair;
class CAgileCryptoPrivKey : public CBase
/** 
* Private key operations
* @internalComponent
*/
{
public:
    //friend class CAgileCryptoGenerateKeypair;
    
    IMPORT_C static CAgileCryptoPrivKey* NewL(void);
    IMPORT_C ~CAgileCryptoPrivKey();
    

    IMPORT_C void GenerateCertReqL(const TDesC8&          aDistinguishedName,
                                       const TDesC8&          aSubjectAltNameRfc822,
                                       const TDesC8&          aChallengePassword,
                                       const TDesC8&          aDnsName,
                                       const TPrivKeyRef&     aKeyId,
                                       TDes&                  aCertReqRef,
                                       TInt&                  aCertReqSize); //agile_crypto_generate_cert_req_pem
    IMPORT_C TRetBufCertReq ReadCertReqL(const TDesC& aCertReqRef, TInt aCertReqSize);

    RPKIServiceAPI GetPkiService();
    
private:
    CAgileCryptoPrivKey();
    void ConstructL(void);


private:
    RPKIServiceAPI iPkiServiceApi;
};


class CAgileCryptoGenerateKeypair : public CBase
/** 
* Generate key pair
* @internalComponent
*/
{
public:
    IMPORT_C static CAgileCryptoGenerateKeypair* NewL(CAgileCryptoPrivKey* aAgileCryptoPrivKey);
    IMPORT_C TErrCode GenerateKeypairL(const TInt&          aPublicKeyLen,
                                       TPrivKeyRef&         aKeyId,
                                       TRequestStatus&      aStatus);
    IMPORT_C void GenerateKeypairCancel(void);
    

private:
    CAgileCryptoGenerateKeypair(CAgileCryptoPrivKey* aAgileCryptoPrivKey);
    void ConstructL(void);

private:
    CAgileCryptoPrivKey*  iAgileCryptoPrivKey;

};

#endif