/*
* Copyright (c) 2003-2007 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:   Policy importer
*
*/



#ifndef __POLICYIMPORTER_H__
#define __POLICYIMPORTER_H__

#include <e32std.h>
#include <e32base.h>
#include "vpnapidefs.h"
#include "fileutil.h"

class CX509Certificate;
#include "pkiserviceapi.h"

class CVpnApiServant;
class CPolicyStore;
class RFs;
class CPolicyPatchInfoList;
class CIkeDataArray;
class CIkeData;
class CAgileProvisionWs;

const TInt KMaxExtPolicyIdLength = 256;
const TInt KDoNotGetKeySize      = -1;

typedef TBuf<KMaxExtPolicyIdLength> TExtVpnPolicyId;

/**
 *  Handles the importing of VPN policies to the system.
 *
 *  @lib internal (vpnmanager.exe)
 *  @since S60 v3.0
 */
class CPolicyImporter : public CActive
    {
public:
    static CPolicyImporter* NewL(const RMessage2& aMessage,
        CVpnApiServant& aVpnApiServant,
        CPolicyStore& iPolicyStore, RFs& aFs);
    static CPolicyImporter* NewL(TRequestStatus& aStatus,
        CVpnApiServant& aVpnApiServant,
        CPolicyStore& iPolicyStore, RFs& aFs);
    ~CPolicyImporter();

    void ImportPolicyL(const TDesC& aDir);
    void ImportSinglePolicyL(const TDesC& aDir, TVpnPolicyId& aNewPolicyId);
    void SynchronizeVpnPolicyServerL();
    
   
private:
    CPolicyImporter(const RMessage2& aMessage, CVpnApiServant& aVpnApiServant,
                    CPolicyStore& iPolicyStore, RFs& aFs);
    CPolicyImporter(TRequestStatus& aStatus, CVpnApiServant& aVpnApiServant,
                    CPolicyStore& iPolicyStore, RFs& aFs);
    void ConstructL();

protected: // From CActive
    void DoCancel();
    void RunL();
    TInt RunError(TInt aError);

private:

    void DoImportPolicyL(const TDesC& aDir);

    void GotoState(TInt aState);
    void SetCurrState(TInt aState);
    void SetNextState(TInt aState);
    TInt CurrState();
    TInt NextState();
    void ChangeStateL();
    void CancelOngoingOperation();
    void ImportComplete(TInt aReturnValue);
    void StateBeginPolicyImportL();
    void StateImportCaCertL();
    void StateAfterImportCaCertL();
    void StateImportPeerCertL();
    void StateAfterImportPeerCertL();
    void StateImportUserPrivKeyL();
    void StateAfterImportUserPrivKeyL();
    void StateAttachCertificateL();
    void StateAfterAttachCertificateL();
    void StateImportPinAndPolL();
    void StateCreateVpnDestinationL();
    void StateEndPolicyImportL();
    void StateGetPolicyProvisionServiceL();
    void StateAfterGetPolicyProvisionServiceL();
    void BuildPolicyIdListL();
    TPkiServiceStoreType GetStoreTypeL(CIkeData* aData);


    /**
     * Checks that BIN format CA certs defined in the policy can be
     * found in the same directory, where the .pol and .pin files are and
     * collects found certificate file names to the iCurrCaCertList list.
     *
     * Leaves with KVpnErrCaCertFileMissing, if a defined file is not found.
     */
    void BuildCaCertListL();

    /**
     * Checks that BIN format peer certs defined in the policy can be
     * found in the same directory, where the .pol and .pin files are and
     * collects found certificate file names to the iCurrPeerCertList list.
     *
     * Leaves with KVpnErrCaCertFileMissing, if a defined file is not found.
     */
    void BuildPeerCertListL();

    /**
     * Checks that BIN format user certs have and assosiated bin format
     * private key. Checks that both files exists in the same directory, where
     * the .pol and .pin files are. Collects the user cert file names to iCurrUserCertList
     * and private key file names to iCurrUserPrivKeyList.
     *
     * Leaves with KVpnErrCaCertFileMissing, if a defined file is not found.
     * of with KVpnErrInvalidPolicyFile if the user certificate doesn't has
     * a assosiated private key.
     */
    void BuildUserPrivKeyAndUserCertListL();
    /**
     * Checks if there is other CA certificates which are not defined in policy file
     *  (like intermediate CAs) and installs them to device. 
     */
    void BuildOtherCaCertListL();

    void ParseIkeDataL();
    void PatchPolicyCaCertInfoL(const TFileName& aPolicyFile);
    CPolicyPatchInfoList* BuildPolicyPatchInfoListL();
    HBufC8* CertSubjectNameL(const TFileName& aCertFile);
    void CleanImportDirectory();
    void AppendIfNotFoundL(CArrayFixFlat<TFileName>* aList,
        TFileName* aFileName);

    /**
     * Returns subject name of the certificate and sets aKeySize.
     * Parameter aKeySize is not set if aKeySize equals KDoNotGetKeySize.
     */
    HBufC8* CertInfoL(const TFileName& aCertFile, TInt& aKeySize);
    /**
     * Returns Issuer name of certificate
     */
    HBufC8* CertIssuerL(const TFileName& aCertFile);
    TFileName GetCAFromFileListL(const TDesC8& aCertSubjectName, CArrayFixFlat<TFileName>* aCertFileArray);
    
    /**
     * Checks whether mVPN policy provision is requested 
     */
    TBool GetPolicyService();
    
    void GetPolicyWsL();
 
    HBufC8* GetPolicyNameL(HBufC* aPolicyFileName);
    
    void PatchPolicyProvisionL();

    
public:
    //Policy provision service
    CAgileProvisionWs* iAgileProvisionWs;
    
private:
    RMessage2 iMessage;
    TRequestStatus* iExtStatus;
    CVpnApiServant& iVpnApiServant;
    CPolicyStore& iPolicyStore;
    RFs& iFs;
    TFileUtil iFileUtil;
    RPKIServiceAPI iPkiService;

    TFileName iImportDir;

    TInt iCurrState;
    TInt iNextState;

    CArrayFixFlat<TExtVpnPolicyId>* iPolicyIdList;
    TInt iCurrPolicyIdIndex;
    TExtVpnPolicyId iCurrPolicyId;

    CIkeDataArray* iCurrIkeDataArray;
    TInt iCurrIkeDataIndex;

    CArrayFixFlat<TFileName>* iCurrCaCertList;
    TInt iCurrCaCertIndex;

    CArrayFixFlat<TFileName>* iCurrPeerCertList;
    TInt iCurrPeerCertIndex;

    CArrayFixFlat<TFileName>* iCurrUserPrivKeyList;
    TInt iCurrUserPrivKeyIndex;

    CArrayFixFlat<TFileName>* iCurrUserCertList;
    TInt iCurrUserCertIndex;
    //for intermediate CAs
    CArrayFixFlat<TFileName>* iCurrOtherCaCertList;
    TInt iCurrOtherCaCertIndex;

    TPKIKeyIdentifier iCurrKeyId;

    HBufC8* iCertFileData;
    HBufC8* iKeyFileData;

    TAny* iPkiOpContext;

    TBool iImportSinglePolicy;
    TBool iAgileProvision;
    TVpnPolicyId* iNewPolicyId;
    TVpnPolicyId iNewPolicyIdBuf;
    TVpnPolicyId iPolicyId;
    
    TBuf<KMaxIdLength> iPolicyIdBuf;
    
    HBufC8* iAgileProvisionWSAddr;

    TUint32 iAgileProvisionAPId;
    };

#endif // __POLICYIMPORTER_H__