diff -r 000000000000 -r 2c201484c85f cryptoservices/certificateandkeymgmt/pkixcertbase/pkixcertchainao.h
--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/cryptoservices/certificateandkeymgmt/pkixcertbase/pkixcertchainao.h	Wed Jul 08 11:25:26 2009 +0100
@@ -0,0 +1,160 @@
+/*
+* Copyright (c) 1998-2009 Nokia Corporation and/or its subsidiary(-ies).
+* All rights reserved.
+* This component and the accompanying materials are made available
+* under the terms of the License "Eclipse Public License v1.0"
+* which accompanies this distribution, and is available
+* at the URL "http://www.eclipse.org/legal/epl-v10.html".
+*
+* Initial Contributors:
+* Nokia Corporation - initial contribution.
+*
+* Contributors:
+*
+* Description: 
+* CPKIXCertChainAO class implementation
+*
+*/
+
+
+
+
+/**
+ @file 
+ @internalTechnology
+*/
+ 
+#ifndef __PKIXCERTCHAINAO_H__
+#define __PKIXCERTCHAINAO_H__
+
+#include <e32base.h>
+#include "pkixcerts.h"
+#include "pkixchainbuilder.h"
+#include "pkixcertstate.h"
+#include <x509cert.h>
+#include <x509certext.h>
+#include <x509gn.h>
+#include <pkixcertchain.h>
+
+class CPKIXCertChainBase;
+
+/**
+ * This class handles the asynchronous part of the pkix chain validation. It
+ * is an active object which handles the asynchronous certificate store operations.
+ */
+class CPKIXCertChainAO : public CActive
+{
+public:
+	static CPKIXCertChainAO* NewL(MCertStore& aCertStore, CPKIXCertChainBase &aPKIXCertChain,
+		const RPointerArray<CX509Certificate>& aRootCerts);
+	static CPKIXCertChainAO* NewL(MCertStore& aCertStore, CPKIXCertChainBase &aPKIXCertChain, 
+		const TUid aClient);
+	virtual ~CPKIXCertChainAO();
+
+private:
+	CPKIXCertChainAO(MCertStore& aCertStore, CPKIXCertChainBase &aPKIXCertChain);
+	CPKIXCertChainAO(MCertStore& aCertStore, CPKIXCertChainBase &aPKIXCertChain, const TUid aClient);
+	void ConstructL(const RPointerArray<CX509Certificate>& aRootCerts);
+
+public:
+	void RunL();
+	TInt RunError(TInt aError);
+	void DoCancel();
+
+private:
+	void HandleEStoreManagerInitializationL();
+	void HandleEStoreManagerInitializedL();
+	void HandleEAddRootsL();
+	void HandleERootsInitializedL();
+	void HandleEBuildChainStartL();
+	void HandleEBuildChainAddCandidateEndL();
+	void HandleEBuildChainCertsFromStoreBeginL();
+	void HandleEBuildChainCertsFromStoreEndL();
+	void HandleEAddCandidateIntermediateCertsEndL();
+	void HandleEValidateEndL();
+
+	// Request functions
+public:
+	void ValidateL(CPKIXValidationResultBase& aValidationResult, const TTime& aValidationTime,							
+		const CArrayPtr<HBufC>* aInitialPolicies, TRequestStatus& aStatus);
+	void CancelValidate();
+
+private:
+	void InitParamsL();
+	void SetParamsL(CX509Certificate& aCert, const TPtrC8& aEncodedParams);
+	void DoValidateL(CPKIXValidationResultBase& aValidationResult, const TTime& aValidationTime,
+		const CArrayPtr<HBufC>* aInitialPolicies);
+	void ProcessCertsL(CPKIXValidationState& aState, CPKIXValidationResultBase& aResult) const;
+	void CriticalExtsL(CPKIXValidationState& aState, const CX509Certificate& aCert) const;
+	void CheckSignatureAndNameL(const CX509Certificate& aCert, CPKIXValidationState& aState, 
+								CPKIXValidationResultBase& aResult) const;
+	void CheckCriticalExtsL(CPKIXValidationState& aState, 
+		CPKIXValidationResultBase& aResult) const;
+
+	/**
+	 * The states used to know what to do in the RunL function.
+	 */
+	enum TState
+	{
+		EAddRoots,
+		ERootsInitialized,
+		EBuildChainStart,
+		EBuildChainAddCandidateEnd,
+		EBuildChainCertsFromStoreBegin,
+		EBuildChainCertsFromStoreEnd,
+		EAddCandidateIntermediateCertsEnd,
+		EValidateEnd
+	};
+
+private:
+	MCertStore* iCertStore;
+	// a reference to the object which owns this instance
+	CPKIXCertChainBase &iPKIXCertChain;
+	TUid iClient;
+	TState iState;
+
+	/**
+	 * <P>Ownership of this object is peculiar.</P>
+	 * <P>We need this to be a member because it is created and initialized in
+	 * the EAddRoots handler but is only added to iRoots in the ERootsInitialized
+	 * handler. iRoots takes ownesrhip of it, so it is set to 0 afterwards.</P>
+	 * <P>The only case where the destructor will have to delete it, is when a leave
+	 * occurs between the EAddRoots and ERootsInitialized states.</P>
+	 */
+	CPKIXCertsFromStore* iCertsFromStoreRoots;
+
+	TRequestStatus* iOriginalRequestStatus;
+
+	/**
+	 * The roots that we trust.
+	 * This can be given 
+	 * <UL>
+	 * <LI>explicitly : the user gives a set of root certificates at construction time.</LI>
+	 * <LI>implicitly : the user gives the uid of the application and the validation code
+	 * retrieves the root certificates trusted for this application from the certificate
+	 * store.</LI>
+	 * </UL>
+	 */
+	CPKIXChainBuilder* iRoots;
+
+	CPKIXChainBuilder* iBuilder;
+
+	/**
+	 * To store the parameters passed to CPKIXCertChainBase::Validate
+	 */ 
+	CPKIXValidationResultBase* iValidationResult;
+	/**
+	 * To store the parameters passed to CPKIXCertChainBase::Validate
+	 */ 
+	TTime iValidationTime;					 
+	/**
+	 * To store the parameters passed to CPKIXCertChainBase::Validate
+	 */ 
+	const CArrayPtr<HBufC>* iInitialPolicies;
+
+	TBool iAddIssuerResult;
+
+	TInt iNumberOfAddedCertificates;
+};
+
+#endif