/*

* Copyright (c) 1998-2009 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description: 

* CWTLSCertChainAO class implementation

*

*/

/**

 @file 

 @internalTechnology

*/

#ifndef __WTLSCERTCHAINAO_H__

#define __WTLSCERTCHAINAO_H__

#include <e32base.h>

#include <f32file.h>

#include <unifiedcertstore.h>

#include <hash.h>

class CWTLSCertChain;

class CWTLSValidationResult;

class CWTLSCertificate;

/**

 * This class handles the asynchronous part of the wtls chain validation. It

 * is an active object which handles the asynchronous certificate store operations.

 */

class CWTLSCertChainAO : public CActive

{

public:

	static CWTLSCertChainAO* NewL(RFs& aFs, CWTLSCertChain &aWTLSCertChain,

		const CArrayPtr<CWTLSCertificate>& aRootCerts);

	static CWTLSCertChainAO* NewL(RFs& aFs, CWTLSCertChain &aWTLSCertChain, 

		const TUid aClient);

	virtual ~CWTLSCertChainAO();

	virtual TInt RunError(TInt aError);

private:

	CWTLSCertChainAO(RFs& aFs, CWTLSCertChain &aWTLSCertChain);

	CWTLSCertChainAO(RFs& aFs, CWTLSCertChain &aWTLSCertChain, const TUid aClient);

	void ConstructL(const CArrayPtr<CWTLSCertificate>& aRootCerts);

public:

	void RunL();

	void DoCancel();

private:

	/**

	 * This function creates a CCertStoreManager,

	 * calls CCertStoreManager initialise and sets the state

	 * to EStoreManagerInitialized

	 */

	void HandleEStoreManagerInitializationL();

	void HandleEStoreManagerInitializedL();

	void HandleEGetCertHashesL();

	void HandleEPruneListL();

	void HandleEPruneListDoneL();

	void HandleECheckTCAL();

	void HandleEIsChainSelfSignedL();

	void HandleERetrieveRootsL();

	void HandleEAddRootToListL();

	void HandleEFindRootL();

	void HandleEValidateEndL();

	// Request functions

public:

	void Validate(CWTLSValidationResult& aValidationResult, const TTime& aValidationTime,							

		TRequestStatus& aStatus);

private:

	TBool CheckSignatureAndNameL(const CWTLSCertificate& aCert,

		CWTLSValidationResult& aResult, TInt aPos) const;

	TBool CheckValidityPeriod(const CWTLSCertificate& aCert,

		CWTLSValidationResult& aResult,	const TTime aTime, TInt aPos) const;

	HBufC8& GeneratePublicKeyHashL(const CWTLSCertificate& aCert) const;

	enum TState

	{

		EStoreManagerInitialization = 0,

		EStoreManagerInitialized,

		EGetCertHashes,

		EPruneList,

		EPruneListDone,

		ECheckTCA,

		EIsChainSelfSigned,

		ERetrieveRoots,

		EAddRootToList,

		EFindRoot,

		EValidateEnd

	};

private:

	RFs& iFs;

	CUnifiedCertStore* iCertStoreManager;

	/**

	 * List of the subject hashes from the cert store

	 * The elements remained owned by the CCTCertInfo

	 */

	RPointerArray< TBuf8<20> > iRootSubjectStoreHashList;

	/**

	 * List of the subject hashes from the passed in certs

	 * We own this object and all its elements

	 */

	RPointerArray< HBufC8 > iRootSubjectClientHashList;

	CCertAttributeFilter* iFilter;

	/**

	 * Stores info on the certs in the cert store

	 * We own this object and all its elements

	 */

	RMPointerArray<CCTCertInfo> iCertInfos;

	/**

	 * Indicates whether iWTLSCertChain.iChain was pruned or not

	 */

	TBool iPruned;

	/**

	 * The index within iChain that the chain was pruned

	 */

	TInt iPrunedChainLength;

	CWTLSCertChain& iWTLSCertChain;

	TUid iClient;

	TPtr8 iEncodedCert;

	HBufC8* iEncodedCertTemp;

	TState iState;

	TRequestStatus* iOriginalRequestStatus;

	/**

	 * Roots passed in from the client that we trust

	 * We own this object and all its elements

	 */

	RPointerArray<CWTLSCertificate> iRootsFromClient;

	/**

	 * Roots from the specified cert store that we trust.

	 * We own this object and all its elements

	 */

	RPointerArray<CWTLSCertificate> iRootsFromStore;

	/**

	 * A counter used to carry counter information between AO states

	 */

	TInt iIndex;

	/**

	 * Indicates if a root cert has been found for this particular chain

	 */

	TBool iFoundRoot;

	/**

	 * To store the parameters passed to CWTLSCertChain::Validate

	 */ 

	CWTLSValidationResult* iValidationResult;

	/**

	 * To store the parameters passed to CWTLSCertChain::Validate

	 */ 

	const TTime* iValidationTime;					 

};

#include <wtlscertchain.h>

#endif