/*
* Copyright (c) 2004-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description: 
*
*/


/**
 @file 
 @publishedPartner
 @released
*/

#ifndef __SISCERTIFICATECHAIN_H__
#define __SISCERTIFICATECHAIN_H__


#include "sisblob.h"

#include <vector>

using std::vector;

// Forward declarations
class CCertChainData;
class CCertificateInfo;

class CSisCertificateChain
	{
public:
	/**
	 * Wrapper class which represents SISCertificateChain.
	 * Actual certificate data is contained in SISX library.
	 * CCertChainData represent the cert chain data (SISX).
	 * @param aSisCertChain reference to CCertChainData
	 */
	explicit CSisCertificateChain (CCertChainData& aSisCertChain);
	/**
	 * Free up owned resources
	 */
	~CSisCertificateChain();
	/**
	 * Class Name
	 */
	virtual std::string Name () const;

public:
	/**
	 * Function will load the certificate into memory.
	 * @param aName certificate file name.
	 */
	void Load (const std::wstring& aName);
	
	/**
	 * This function will extract the signing chain certificates (1 pem file per chain).
	 * The files will me named as cert1.pem, cert2.pem etc. All the certificates 
	 * represented by this chain will be appended in the same pem file. File name of 
	 * the certificate chain is based on the certificate chain index passed to it.
	 * 
	 * @param aChainIndex Certificate Chain index.
	 * @return void
	 */
	void ExtractCertificateChain (std::string& aCertFileName);
	/**
	 * Function will retrieve a certificate from the chain.
	 * 
	 * @param aOffset offset of certificate within the chain. It will be updated
	 * 			after the function call to point to the next certificate in the
	 * 			chain.
	 * @return return X509 certificate instance. Caller is responsible for 
	 * 			calling X509_free on the returned data.
	 */
	X509* GetX509 (CSISFieldRoot::TFieldSize& aOffset) const; 
	/**
	 * Function will retrieve the bottom most certificate from the chain.
	 * 
	 * @return return X509 certificate instance. Caller is responsible for 
	 * 			calling X509_free on the returned data.
	 */
	X509* GetBottomX509 () const;  // calling code responsible for calling X509_free

	/**
	 * Extract the complete certificate chain. Where each certificate is 
	 * represented by CCertificateInfo class.
	 */
	inline const std::vector<CCertificateInfo*>& CertChain() const;

private:
	CSisCertificateChain (const CSisCertificateChain& aInitialiser):iSisCertChain(aInitialiser.iSisCertChain){}
	void ConstructL();
	
	void LoadText (const std::wstring& aName);
	void LoadBinary (const std::wstring& aName);
	
private:
	CCertChainData&	iSisCertChain;
	std::vector<CCertificateInfo*>	iCertificateList;
	};


inline std::string CSisCertificateChain::Name () const
	{
	return "Certificate Chain";
	}

inline const std::vector<CCertificateInfo*>& CSisCertificateChain::CertChain() const
	{
	return iCertificateList;
	}

#endif // __SISCERTIFICATECHAIN_H__