/*
* Copyright (c) 2007 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of the License "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:
*
*/


/** 
@file

@internalComponent
@released
*/

#include <caf/streaming/keystreamsink.h>
#include <caf/streaming/keyassociation.h>

#include <in_sock.h>
#include <lib_pfkey.h>
#include <pfkey_send.h>
#include <ipsecpolapi.h>

#ifndef __IPSECKEYSTREAMSINK_H__
#define __IPSECKEYSTREAMSINK_H__

class RDesReadStream;

namespace StreamAccess
{
	NONSHARABLE_CLASS(CIpSecKeyStreamSink) : public CKeyStreamSink
	{
	public:
		 static CIpSecKeyStreamSink* NewLC(RReadStream& aReadStream);
		 static CIpSecKeyStreamSink* NewLC(const TInetAddr& aSrcAddr, const TInetAddr& aDstAddr);
		 ~CIpSecKeyStreamSink();
		 		 
		 // CKeyStreamSink interface
		 CKeyStreamSink* CloneLC() const;
		 void ProcessNewKeyAssociationL(const CKeyAssociation& aKeyAssociation);
		 void SetEncryptionAlgorithmL(const TEncryptionAlgorithm& aEncryptionAlgorithm);
		 void SetAuthenticationAlgorithmL(const TAuthenticationAlgorithm& aAuthenticationAlgorithm);	 
	protected:
		 void DoExternalizeL(RWriteStream& aStream) const;
	private:
		 void ConstructL();
		 void SetPolicyL();
		 void RemoveSaL(TUint32 aSpi);
		 void SynchronousSendAndVerifyMessageL(TPfkeySendMsg& aMessage, TInt aMessageType, TUint32 aSpi);
		 TBool CompareReceivedMessageExtensionsL(TPfkeyRecvMsg &aReceivedReply, TUint32 aSpi) const;
		 void VerifyAssociationsNotSentL() const;
		 CIpSecKeyStreamSink(const TInetAddr& aSrcAddr, const TInetAddr& aDstAddr);
		 void AddAssociationL(TPfkeySendMsg& aMessage, TUint32 aSpi);
	private:
		 RSocketServ iSocketServ;
		 /** Handle to policy server */
		 RIpsecPolicyServ iPolicyServer;
		 /** Handle to SADB socket */
		 RSADB iSADB;
 		 TInetAddr iSourceAddr;
		 TInetAddr iDestinationAddr;
		 TUint8 iAuthAlg;
		 TUint8 iEncAlg;
		 TUint32 iSequenceNumber;
		 /** Signifies whether a security policy has already been set */
		 TBool iPolicySet;
		 TPolicyHandlePckg iPolicyHandle;
		 /** Used for removing old SA-s, managed as a FIFO queue */
		 RArray<TUint32> iSubmittedSpiList; 
		 /** Number of supported concurrent SA-s */
		 TInt iMaxSpiNumber; 
	};
} // namespace StreamAccess
#endif /* __IPSECKEYSTREAMSINK_H__ */