/*
* Copyright (c) 2005-2009 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:  IKEv1 SA data definition
*
*/


#ifndef T_IKEV1SADATA_H
#define T_IKEV1SADATA_H

#include "internaladdress.h"
#include "ikemsgheader.h"
#include "ikev1payloads.h"

class CIkeData;

#define   IKEV1_KEY_MATERIAL_SIZE   64
#define   IKEV1_MAX_IV_SIZE         20        //Max hash algorithm output size
#define   DEFAULT_MAX_ISAKMP_LIFETIME 28000   //for security reasons

// Class TIkev1SAData is the IKEv1 SA parameter definition 
// which is used to pass SA information between IKE server and IKEv1
// plug-in.
class TIkev1SAData 
{
public:
    TIkev1SAData()
    :iCookie_I(),
	 iCookie_R(),
     iSAId(0),
     iSAState(0),
     iInitiator(EFalse),
     iDPDSupported(EFalse),
     iFamiliarPeer(EFalse),
     iNAT_T_Required(EFalse),
     iAutoLogin(EFalse),
     iNAT_D_Flags(0),
     iIkeData(NULL),
     iLocalAddr(),
	 iRemoteAddr(),
	 iDestinAddr(),
     iVirtualIp(NULL),
     iSeq(0),
     iPrevExchange(0),
     iFlags(0),
     iEncrAlg(0),
     iHashAlg(0),
     iAuthMethod(0),
     iGroupDesc(0),
     iGroupType(0),
     iKeyLength(0),
     iPRF(0),
     iLifeTimeSecs(0),
     iLifeTimeKB(0),
     iDPDRetry(0),
     iDPDSequence(0),
     iPendingDPDSequence(0),
     iExpectedDPDSequence(0),
     iLastIKEMsgInfo(),
     iLastMsg(NULL)
         {}
	inline void CleanUp()
	{
	    delete iVirtualIp;
        iVirtualIp = NULL;
        delete iLastMsg;
        iLastMsg = NULL;
    }
	inline void StoreVirtualIp(CInternalAddress* aVirtualIp)
	{
		delete iVirtualIp;
		iVirtualIp = aVirtualIp;
	}
	inline void CopyL(TIkev1SAData& aSrc)
	{
	   CInternalAddress* SavedVip = iVirtualIp;
	   HBufC8* SavedLastMsg = iLastMsg;
	   Mem::Copy((TUint8*)&iCookie_I, (TUint8*)&aSrc.iCookie_I, sizeof(TIkev1SAData));
	   iVirtualIp = SavedVip;
	   iLastMsg = SavedLastMsg;
	   if ( aSrc.iVirtualIp )
	       {
	       StoreVirtualIp(CInternalAddress::NewL(*(aSrc.iVirtualIp)));
	       }
	   if ( aSrc.iLastMsg &&
	        aSrc.iLastMsg != iLastMsg )
	       {
	       delete iLastMsg;
	       iLastMsg = aSrc.iLastMsg->AllocL();
	       }
	}

public:
	TCookie   iCookie_I;        // Initiator Cookie
	TCookie   iCookie_R;        // Responder Cookie
	TUint32   iSAId;            // Internal negotiation Id
	
	TInt      iSAState;         // IKE SA State
	TBool     iInitiator;       // TRUE if local end is initiator
	TBool     iDPDSupported;    // Both ends support DPD 	
	TBool     iFamiliarPeer;    // Nokia VPN implementation detected in peer    
	TBool     iNAT_T_Required;  // True when NAT detected between local end and peer
	TBool     iAutoLogin;       // SA negotiated due RKMD::Activate request
	TUint32   iNAT_D_Flags;     // If not zero, there is NAT between sites	
	
	CIkeData* iIkeData;     

	TInetAddr iLocalAddr;   
	TInetAddr iRemoteAddr;      // Remote Address ("From Policy")
	TInetAddr iDestinAddr;      // Current peer destination address and port
	CInternalAddress* iVirtualIp; // Virtual IP address (and DNS addresses)

	TUint32 iSeq;               // For PFKEY API
	TUint8  iPrevExchange;      // Used to process the last msg of Phase I
	TUint8  iFlags;             // Flags in the msg header
	//
	// Selected IKE SA proposal 
	//
	TUint16 iEncrAlg;           //OAKLEY encryption function    
	TUint16 iHashAlg;           //OAKLEY hash function          
	TUint16 iAuthMethod;        //OAKLEY authentication function
	TUint16 iGroupDesc;         //OAKLEY GROUP
	TUint16 iGroupType;         //OAKLEY GROUP type
	TUint16 iKeyLength;         //Encryption key length
	TUint16 iPRF;               //Reserved
	TUint32 iLifeTimeSecs;      //SA lifetime seconds
	TUint32 iLifeTimeKB;        //SA lifetime KiloBytes
	
	//
	// IKE SA DPD (keep alive) protocol parameters
	//
	TInt    iDPDRetry;
	TUint32 iDPDSequence;
	TUint32 iPendingDPDSequence;
	TUint32 iExpectedDPDSequence;
	
	// Last IKE msg info
	TLastIKEMsg iLastIKEMsgInfo;
	HBufC8*     iLastMsg;
	TInetAddr   iLastRemoteAddr;
	
    //
	// IKEv1 keymaterial
	//
	TBuf8<IKEV1_KEY_MATERIAL_SIZE> iSKEYID;      //KEY used for encryption/decryption of messages
	TBuf8<IKEV1_KEY_MATERIAL_SIZE> iSKEYID_d;    //KEY used to derive keys for non-ISAKMP SAs
	TBuf8<IKEV1_KEY_MATERIAL_SIZE> iSKEYID_a;    //KEY used for authentication of ISAKMP messages
	TBuf8<IKEV1_KEY_MATERIAL_SIZE> iSKEYID_e;    //KEY used for encryption/decryption of ISAKMP messages

	TBuf8<IKEV1_MAX_IV_SIZE>       iIV;          //normal IV
	TBuf8<IKEV1_MAX_IV_SIZE>       iLastIV;      //Saves the last IV of PHASE_I to compute iNotifIV everytime and the first IV in Quick mode

};


class CSARekeyInfo : public CBase
{
	public:
		static CSARekeyInfo* NewL(const TCookie& aICookie, const TCookie& aRCookie, 
		                          CInternalAddress* aInternalAddr)
		{
			return new (ELeave) CSARekeyInfo(aICookie, aRCookie, aInternalAddr);
		}
		~CSARekeyInfo()
		{   
		    delete iInternalAddr;
		}
	
		inline const TCookie&  GetCookieI() { return iCookie_I;}  
		inline const TCookie&  GetCookieR() { return iCookie_R;}
		inline CInternalAddress* GetInternalAddr()
		{
			CInternalAddress* VirtualIp = iInternalAddr;
			iInternalAddr = NULL;
			return VirtualIp;
		}		

    private:
   		CSARekeyInfo(const TCookie& aICookie, const TCookie& aRCookie, 
   		             CInternalAddress* aInternalAddr)
   		:iCookie_I(aICookie),
		 iCookie_R(aRCookie),
		 iInternalAddr(aInternalAddr)
   		{}

	private:
		TCookie iCookie_I;      // Initiator Cookie of the IKE SA rekeyed
		TCookie iCookie_R;      // Responder Cookie of the IKE SA rekeyed
		CInternalAddress* iInternalAddr; 
	
};


class TIpsecSPI
{
	public:
		TIpsecSPI()
		:iSrcAddr(), iDstAddr(), iSPI(0), iInbound(EFalse), iProtocol(0)
		    {};
	public:
		TInetAddr iSrcAddr;
		TInetAddr iDstAddr;
		TUint32   iSPI;
		TBool     iInbound;    // Inbound = ETrue
		TUint8    iProtocol;
		TUint8    iReserved[3];
};

#endif // T_IKEV1SADATA_H