/*+
−
* Copyright (c) 2002-2009 Nokia Corporation and/or its subsidiary(-ies).+
−
* All rights reserved.+
−
* This component and the accompanying materials are made available+
−
* under the terms of the License "Eclipse Public License v1.0"+
−
* which accompanies this distribution, and is available+
−
* at the URL "http://www.eclipse.org/legal/epl-v10.html".+
−
*+
−
* Initial Contributors:+
−
* Nokia Corporation - initial contribution.+
−
*+
−
* Contributors:+
−
*+
−
* Description: +
−
* Declares classes for producing PKCS#10 certificate requests.+
−
*+
−
*/+
−
+
−
+
−
/**+
−
 @file+
−
 @publishedPartner+
−
 @released +
−
*/+
−
+
−
#ifndef __PKCS10_H__+
−
#define __PKCS10_H__+
−
+
−
#include <e32base.h>+
−
#include <asn1enc.h>+
−
#include <mctkeystore.h>+
−
#include <signed.h>+
−
+
−
class CX500DistinguishedName;+
−
class CASN1EncBase;+
−
class CPKCS10Attributes;+
−
class CPKCS10KeyHelper;+
−
class CMessageDigest;+
−
class TX509KeyEncoder;+
−
+
−
/** +
−
 * Class for making PKCS#10 Certificate Request objects.+
−
 *+
−
 * Keys are specified by a cryptotokens key info object - this means that this+
−
 * API can only be used to generate cert requests for keys that are held in a+
−
 * keystore on the device.+
−
 * +
−
 */+
−
class CPKCS10Request : public CActive+
−
	{+
−
public:+
−
	/**+
−
	 * Creates a new PKCS#10 request object.+
−
	 * +
−
	 * @param aDN X500 distinguished name of the entity provided by caller.+
−
	 *     Stored in iDN member variable. Ownership is not transferred.+
−
	 * @param aKeyInfo The key info object of the key to sign the request with.+
−
	 * 	   Does not take ownership.+
−
	 * @param aAttr (Optional) The PKCS10 attributes to include in the request.+
−
	 * 	   Takes ownership.+
−
	 * @return A pointer to the newly allocated object.+
−
	 */+
−
	IMPORT_C static CPKCS10Request* NewL(const CX500DistinguishedName& aDN,+
−
										 const CCTKeyInfo& aKeyInfo,+
−
										 CPKCS10Attributes* aAttr = NULL);+
−
	+
−
	/**+
−
	 * Creates a new PKCS#10 request object.+
−
	 * +
−
	 * @param aDN X500 distinguished name of the entity provided by caller.+
−
	 *     Stored in iDN member variable. Ownership is not transferred.+
−
	 * @param aKeyInfo The key info object of the key to sign the request with.+
−
	 * 	   Does not take ownership.+
−
	 * @param aAttr (Optional) The PKCS10 attributes to include in the request.+
−
	 * 	   Takes ownership.+
−
	 * @return A pointer to the newly allocated object that is left on the+
−
	 * 	   cleanup stack.+
−
	 */+
−
	IMPORT_C static CPKCS10Request* NewLC(const CX500DistinguishedName& aDN,+
−
										 const CCTKeyInfo& aKeyInfo,+
−
										 CPKCS10Attributes* aAttr = NULL);+
−
+
−
	/**+
−
	 * Destructs PKCS#10 object, deletes encoding buffer and attributes.+
−
	 */+
−
	IMPORT_C virtual ~CPKCS10Request();+
−
+
−
public:+
−
+
−
	/**+
−
	 * Set the attributes to be encoded in the request. It replaces existing+
−
	 * attributes, if any.+
−
	 * @param aAttr The attributes - this object takes ownership.+
−
	 */+
−
	IMPORT_C void SetAttributes(CPKCS10Attributes* aAttr);+
−
+
−
	/**+
−
	 * Set the digest algorithm to use when signing the request.  If this method+
−
	 * is not called, the default SHA-1 is used. +
−
	 *+
−
	 * @param aDigest	For RSA keys, one of EMD2, EMD5 or ESHA1.  +
−
	 * 					For DSA keys, ESHA1 is the only permitted value.+
−
	 * @leave KErrArgument if the specified algorithm is not supported.+
−
	 */+
−
	IMPORT_C void SetDigestAlgL(TAlgorithmId aDigest);+
−
+
−
	/**+
−
	 * Set the distinguished name of the entity. It replaces existing+
−
	 * name, if any.+
−
	 * @param aDN X500 distinguished name of the entity provided by caller.+
−
	 *     Stored in iDN member variable. Ownership is not transferred.+
−
	 */+
−
	IMPORT_C void SetDistinguishedNameL(const CX500DistinguishedName& aDN);+
−
+
−
	/**+
−
	 * Set the information of the key to sign with. It replaces existing+
−
	 * key info, if any.+
−
	 * @param aKeyInfo The key info object of the key to sign the request with.+
−
	 * 	   Does not take ownership.+
−
	 */+
−
	IMPORT_C void SetKeyInfoL(const CCTKeyInfo& aKeyInfo);+
−
+
−
	/**+
−
	 * Create the ASN.1 DER encoding of the certificate request.  This is an+
−
	 * asynchronous method. The Cancel() method can be called to cancel an+
−
	 * outstanding request. This method can be called repeatedly to create +
−
	 * certificate requests after setting the various parameters. However an+
−
	 * outstanding request must complete or be cancelled before calling this +
−
	 * method again.+
−
	 * +
−
	 * +
−
	 * @param aResult	On successful completion, this points to a newly+
−
	 * 					allocated buffer containing the encoded certificate request.+
−
	 * @param aStatus	Asynchronous status notification +
−
	 */	+
−
	IMPORT_C void CreateEncoding(HBufC8*& aResult, TRequestStatus& aStatus);+
−
	+
−
private:+
−
+
−
	virtual void RunL();+
−
	virtual TInt RunError(TInt aErr);+
−
	virtual void DoCancel();+
−
+
−
	enum TState+
−
		{+
−
		EIdle,+
−
		EInitialize,+
−
		EGetKeyStore,+
−
		EGetPublicKey,+
−
		EOpenSigner,+
−
		ESign+
−
		};+
−
+
−
private:+
−
	/** Private constructor that initializes essential member variables. */+
−
	CPKCS10Request(const CX500DistinguishedName* aDN,+
−
				   const CCTKeyInfo* aKeyInfo,+
−
				   CPKCS10Attributes* aAttr);+
−
+
−
	// Methods making ASN.1 encoding objects+
−
+
−
	/**	+
−
	 * Performs the actual ASN.1 encoding of the request without signing it.+
−
	 * certRequestInfo is what gets signed with private key.+
−
	 * @return Pointer to a newly allocated CASN1EncSequence object.+
−
	 */+
−
	CASN1EncSequence* MakeCertRequestInfoEncLC();+
−
+
−
	/**+
−
	 * Encodes desired certificate attributes into ASN1. Takes whatever +
−
	 * attributes are in the iAttributes and adds them below a +
−
	 * sequence. If there are no attributes stored, leaves the set empty.+
−
	 * +
−
	 * The structure of the attribute node is as follows:+
−
	 * @code+
−
     * Context-specific[0]+
−
     *    SEQUENCE-OF+
−
     *      OID of the organization+
−
     *      SET-OF+
−
     *        SEQUENCE-OF (stored in iAttributes)+
−
     *          SEQUENCE-OF+
−
     *            OID of attribute+
−
     *            OCTET STRING value+
−
     *          SEQUENCE-OF+
−
     *            OID of attribute+
−
     *            OCTET STRING value+
−
     *          ...+
−
	 * @endcode+
−
	 * @return Pointer to a newly allocated encoding object containing +
−
	 *     desired certificate attributes.+
−
	 */+
−
	CASN1EncBase* MakeAttrEncLC();+
−
+
−
	/**+
−
	 * Generates data to be signed.+
−
	 */+
−
	void EncodeTBSDataL();+
−
+
−
	void CreateFinalEncodingL();+
−
+
−
	void Reset();+
−
+
−
private:+
−
	const CX500DistinguishedName*	iDN;+
−
	const CCTKeyInfo* 				iKeyInfo;+
−
	CPKCS10Attributes*				iAttributes;+
−
	TAlgorithmId					iDigestId;+
−
	TRequestStatus*					iClientStatus;+
−
	TState 							iState;+
−
	HBufC8**						iResult;+
−
	MCTKeyStore*					iKeyStore;+
−
	CPKCS10KeyHelper*				iKeyHelper;+
−
	HBufC8*							iExportedKey;+
−
	HBufC8*							iTBSData;+
−
	};+
−
+
−
#endif+
−