/*

* Copyright (c) 2000 Nokia Corporation and/or its subsidiary(-ies). 

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description: Implementation of policymanagement components

*

*/

#ifndef TRUSTED_SESSION_HEADER_

#define TRUSTED_SESSION_HEADER_

// INCLUDES

#include "ElementBase.h"

#include <PolicyEngineClientServer.h>

#include <e32base.h>

#include <ssl.h>

#include <e32cmn.h>

class CX509Certificate;

class CX500DistinguishedName;

// CONSTANTS

const TInt KSerialNoLength = 20;

const TInt KCertNameLength = 100;

// MACROS

// DATA TYPES

// FUNCTION PROTOTYPES

// FORWARD DECLARATIONS

class CPolicyStorage;

class CCertificateMaps;

class CElementBase;

class CSubjectInfo;

// CLASS DECLARATION

class CTrustedSession : public CBase

{

	public:

		/**

		* CTrustedSession Constructor for CTrustedSession class

        */

		CTrustedSession();

		/**

		* ~CTrustedSession Destructor for CTrustedSession class

        */

		~CTrustedSession();

		/**

		* NewL() Symbian specific two phase constructor

		* @return Pointer to created CTrustedSession object

        */

		static CTrustedSession * NewL();

		void ConstructL();

		void MakeSessionTrustL( const RMessage2& aMessage);

		TCertInfo& SessionCertificate();

		void AddSessionSIDL( TUid aSecirityUID);

		void RemoveSessionTrust();

		TBool CertificatedSession() const;

		const TDesC8& CASNForSessionL(); 

		const TDesC8& SIDForSession(); 

		TBool CertMatchL( const TDesC8& aTrustedSubject1, const TDesC8& aTrustedSubject2, TBool aUseEditedItems );

		TBool RoleMatchL( const TDesC8& aTrustedSubject, const TDesC8& aRole, TBool aUseEditedItems );

		const TDesC8& CommonNameForSubjectL( const TDesC8& aTrustedSubject, TBool aUseEditedItems ); 

		const TDesC8& FingerPrintForSubjectL( const TDesC8& aTrustedSubject, TBool aUseEditedItems ); 

  		TBool IsCertificateMappingValidL( CElementBase * aElement);

  		void GetMappedTargetTrustedSubjectL( RPointerArray<HBufC8>& aTargetTrustedMappedSubjectArray, CElementBase * aElement, TBool aUseEditedItems );

  		HBufC8* GetTargetTrustedSubjectL( CElementBase * aElement, TBool aUseEditedItems );

  		CElementBase* CreateCertificateMappingL( const TDesC8& aAlias );

		void ReplaceIllegalCharacters( TPtr8& aData );

	private:

		TBool iSessionTrust;

		TCertInfo iSessionCertInfo;	

		TBuf8<40> iFingerPrint;

		TBuf8<40> iSessionSID;

		HBufC8* iCASN;

};

class CCertificateMaps : public CBase

{

	public:

		class CRolesInfo : public CBase

		{

			public:

				CRolesInfo();

				~CRolesInfo();

				static CRolesInfo* NewL( const TDesC8& aRole, TElementState aState);

			public:

				HBufC8 * iRole;

				TElementState iState;

		};

		typedef RPointerArray<CRolesInfo> RRoles;

		typedef RPointerArray<CSubjectInfo> RInfos;

		class CSubjectInfo : public CBase

		{

			public:

				CSubjectInfo();

				~CSubjectInfo();

				TBool Match( const TDesC8& aTrustedSubject, TBool aCheckMappedCertificates);

				TBool RoleMatchL( const TDesC8& aRole);

				TRole CertificateRoleL( TBool aUseEditedItems );

			public:

				HBufC8* iCASN;					//CA+SerialNumber+FP

				HBufC8* iMappedToCert;			//CA+SerialNumber+FP

				CSubjectInfo* iMappedToInfo;	//pointer to subject info

				HBufC8* iAlias;					//Alias for certificate

				HBufC8* iSubject;				//Issued to information

				HBufC8* iFingerPrint;			//fingerprint

				RRoles iRoles;					//list of roles which are valid for subject 

				TElementState iState;			//indicates corresponding rule element state

		};

	public:

		CCertificateMaps();

		~CCertificateMaps();

		static CCertificateMaps* NewL();

		void NewMappingsAvailable();

		TRole CertificateRoleL( const TCertInfo& aCertInfo, TBool aUseEditedItems);

 		static void CreateSubjectInfoL( CSubjectInfo * aInfo, const TDesC8& aCertificate);

 		static void CreateSubjectInfoL( CSubjectInfo * aInfo, const TCertInfo& aCertInfo);

 		static void CreateFingerPrint( TDes8& iFingerPrint, const TCertInfo& aCertInfo);

 		static HBufC8* CasnForCertInfoL( const TCertInfo& aInfo);

 		static CX509Certificate* ParseCertificateL( const TDesC8& aCertificate);

		static TBool EvaluateElementValidity( const TBool aUseEditedElements, const TElementState aState);

	private:

		void BringUpToDateL();

		void LoadCertificateMapsL();

		void AddRolesToCertL( const TDesC8& aRole, const TDesC8& aSubject, TElementState aElementState);

		static void ParseSubjectInfoL( CSubjectInfo* aInfo, CX509Certificate* aCertificate);

		static HBufC8* ParseDNL( const CX500DistinguishedName * aDN, TBool aOnlyCommonName);

		CSubjectInfo* FindSubjectL( const TDesC8& aTrustedSubject, TBool aUseEditedItems);

		TBool IsAliasExistL( const TDesC8& aAlias);

	private:

		RPointerArray<CSubjectInfo> iCerts;

		CPolicyStorage* iPolicyStorage;

		TBool iMapsUpToDate;

		friend class CTrustedSession;

};

#endif