/*

* Copyright (c) 2001-2009 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of the License "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description: 

* MCTWritableCertStore.h (v.2)

*

*/

/**

 @file 

 @publishedPartner

 @released

*/

#ifndef __MCTWRITABLECERTSTORE_H__

#define __MCTWRITABLECERTSTORE_H__

#include <mctcertstore.h>

/**

 * The UID of writeable certificate store interfaces.

 *

 * A token that supports this interface should also support the read-only certificate 

 * store interface.

 */

const TInt KInterfaceWritableCertStore = 0x102020FB; // new version, since 9.0

/**

 * Defines the interface for a writeable certificate store token.

 * 

 * This extends the read-only certificate store API in MCTCertStore by adding 

 * functions to add and delete certificates, and to set their applicability and 

 * trust settings. 

 *

 * This documentation describes the security policy that must be enforced by

 * implementations of the interface.

 * 

 * @publishedPartner

 * @released

 */

class MCTWritableCertStore : public MCTCertStore

	{

public:

	/**

	 * Adding a certificate

	 */

	/**

	 * Adds a certificate to the store.

	 * 

	 * This is an asynchronous request.	

	 * 

	 * @param aLabel				The label of the certificate to add.

	 * @param aFormat				The format of the certificate.

	 * @param aCertificateOwnerType	The owner type.

	 * @param aSubjectKeyId			The Subject key ID.

	 * @param aIssuerKeyId			The issuer key ID.

	 * @param aCert					The certificate to be added.

	 * @param aStatus				The request status object; contains the result of the Add() 

	 * 								request when complete. Set to KErrCancel, if an outstanding 

	 * 								request is cancelled.

	 *

	 * @capability WriteUserData	This requires the WriteUserData capability when

	 *								applied to user certificates.

	 * @capability WriteDeviceData	This requires the WriteDeviceData capability

	 *								when applied to CA certificates.

	 * @leave KErrPermissionDenied	If the caller doesn't have the required capabilities.

	 */

	virtual void Add(const TDesC& aLabel, TCertificateFormat aFormat,

					 TCertificateOwnerType aCertificateOwnerType, 

					 const TKeyIdentifier* aSubjectKeyId,

					 const TKeyIdentifier* aIssuerKeyId,

					 const TDesC8& aCert, TRequestStatus& aStatus) = 0;

	/** Cancels an ongoing Add() operation. */

	virtual void CancelAdd() = 0;

	/**

	 * Removing Certificates

	 */

	/**

	 * Removes a certificate.

	 * 

	 * @param aCertInfo	The certificate to be removed.

	 * @param aStatus	The request status object; contains the result of the Remove() 

	 * 					request when complete. Set to KErrCancel, if an outstanding request is cancelled.

	 *

	 * @capability WriteUserData	This requires the WriteUserData capability when

	 *								applied to user certificates.

	 * @capability WriteDeviceData	This requires the WriteDeviceData capability

	 *								when applied to CA certificates.

	 * @leave KErrPermissionDenied	If the caller doesn't have the required capabilities.

	 */

	virtual void Remove(const CCTCertInfo& aCertInfo, TRequestStatus& aStatus) = 0;

	/** Cancels an ongoing Remove() operation. */

	virtual void CancelRemove() = 0;

	/**

	 * Setting applicability

	 */

	/**

	 * Replaces the current applicability settings with the settings in the

	 * supplied array.

	 * 

	 * This should only be called for CA certificates - it has no meaning for

	 * user certificates.

	 * 

	 * If this function is called by the unified certstore the given application

	 * uids array is guaranteed not to contain duplicates. However, client

	 * applications may bypass the unified certstore and call this function

	 * directly, in that case the array passed might contain duplicates.

	 * 

	 * @param aCertInfo		The certificate whose applicability should be updated.

	 * @param aApplications	The new applicability settings. Ownership of this

	 * 						remains with the caller, and it must remain valid for the

	 * 						lifetime of the call.

	 * @param aStatus		The request status object; contains the result of the SetApplicability() 

	 * 						request when complete. Set to KErrCancel, if an outstanding request is cancelled.

	 *

	 * @capability WriteDeviceData	This requires the WriteDeviceData capability.

	 * @leave KErrPermissionDenied	If the caller doesn't have the required capabilities.

	 */

	virtual void SetApplicability(const CCTCertInfo& aCertInfo, 

						  const RArray<TUid>& aApplications, TRequestStatus &aStatus) = 0;

	/** Cancels an ongoing SetApplicability() operation. */

	virtual void CancelSetApplicability() = 0;

	/**

	 * Changing trust settings

	 */

	/**

	 * Changes the trust settings.

	 * 

	 * A CA certificate is trusted if the user is willing to use it for authenticating 

	 * servers. It has no meaning with other types of certificates.

	 * 

	 * @param aCertInfo	The certificate to be updated.

	 * @param aTrusted	ETrue, if trusted; EFalse, otherwise.

	 * @param aStatus	The request status object; contains the result of the SetTrust() 

	 * 					request when complete. Set to KErrCancel, if an outstanding request is cancelled.

	 *

	 * @capability WriteDeviceData	This requires the WriteDeviceData capability.

	 * @leave KErrPermissionDenied	If the caller doesn't have the required capabilities.

	 */

	virtual void SetTrust(const CCTCertInfo& aCertInfo, TBool aTrusted, 

						  TRequestStatus& aStatus) = 0;

	/** Cancels an ongoing SetTrust() operation. */

	virtual void CancelSetTrust() = 0;

	/**

	 * Adding a certificate

	 */

	/**

	 * Same as original Add() method above, but with additional parameter TBool aDeletable.

	 *

	 * @param aLabel				The label of the certificate to add.

	 * @param aFormat				The format of the certificate.

	 * @param aCertificateOwnerType	The owner type.

	 * @param aSubjectKeyId			The Subject key ID.

	 * @param aIssuerKeyId			The issuer key ID.

	 * @param aCert					The certificate to be added.

	 * 

	 * @param aDeletable			Sets the value for the certificate's deletable flag

	 * 									= true 	- means it is permitted to remove the

	 *												certificate from certstore

	 * 									= false - means the certificate is NOT deletable.

	 *

	 * @param aStatus				The request status object;

	 * 								contains the result of the Add() request when complete. 

	 *								Two of possible error values:

	 *									= KErrCancel, if an outstanding request is cancelled;

	 *									= KErrNotSupported (-5), if the method is called from a

	 *										child class that doesn't support implementation of

	 *										the new Add() method.

	 *

	 * @capability WriteUserData	This requires the WriteUserData capability when

	 *								applied to user certificates.

	 * @capability WriteDeviceData	This requires the WriteDeviceData capability

	 *								when applied to CA certificates.

	 * @leave KErrPermissionDenied	If the caller doesn't have the required capabilities.

	 */

	virtual void Add(const TDesC& aLabel, TCertificateFormat aFormat,

					 TCertificateOwnerType aCertificateOwnerType, 

					 const TKeyIdentifier* aSubjectKeyId,

					 const TKeyIdentifier* aIssuerKeyId,

					 const TDesC8& aCert, 

					 const TBool aDeletable,

					 TRequestStatus& aStatus );

	};

#include "mctwritablecertstore.inl"

#endif