/*

 * Copyright (c) 2007 Nokia Corporation and/or its subsidiary(-ies).

 * All rights reserved.

 * This component and the accompanying materials are made available

 * under the terms of the License "Eclipse Public License v1.0"

 * which accompanies this distribution, and is available

 * at the URL "http://www.eclipse.org/legal/epl-v10.html".

 *

 * Initial Contributors:

 * Nokia Corporation - initial contribution.

 *

 * Contributors:

 *

 * Description:

 *

 */

 /** 

 @file

 @internalComponent

 @released

 */

 #include <caf/streaming/keystreamsink.h>

 #include <caf/streaming/keyassociation.h>

 #include <in_sock.h>

 #include <lib_pfkey.h>

 #include <pfkey_send.h>

 #include <ipsecpolapi.h>

 #ifndef __IPSECKEYSTREAMSINK_H__

 #define __IPSECKEYSTREAMSINK_H__

 class RDesReadStream;

 namespace StreamAccess

 {

 	NONSHARABLE_CLASS(CIpSecKeyStreamSink) : public CKeyStreamSink

 	{

 	public:

 		 static CIpSecKeyStreamSink* NewLC(RReadStream& aReadStream);

 		 static CIpSecKeyStreamSink* NewLC(const TInetAddr& aSrcAddr, const TInetAddr& aDstAddr);

 		 ~CIpSecKeyStreamSink();

 		 // CKeyStreamSink interface

 		 CKeyStreamSink* CloneLC() const;

 		 void ProcessNewKeyAssociationL(const CKeyAssociation& aKeyAssociation);

 		 void SetEncryptionAlgorithmL(const TEncryptionAlgorithm& aEncryptionAlgorithm);

 		 void SetAuthenticationAlgorithmL(const TAuthenticationAlgorithm& aAuthenticationAlgorithm);	 

 	protected:

 		 void DoExternalizeL(RWriteStream& aStream) const;

 	private:

 		 void ConstructL();

 		 void SetPolicyL();

 		 void RemoveSaL(TUint32 aSpi);

 		 void SynchronousSendAndVerifyMessageL(TPfkeySendMsg& aMessage, TInt aMessageType, TUint32 aSpi);

 		 TBool CompareReceivedMessageExtensionsL(TPfkeyRecvMsg &aReceivedReply, TUint32 aSpi) const;

 		 void VerifyAssociationsNotSentL() const;

 		 CIpSecKeyStreamSink(const TInetAddr& aSrcAddr, const TInetAddr& aDstAddr);

 		 void AddAssociationL(TPfkeySendMsg& aMessage, TUint32 aSpi);

 	private:

 		 RSocketServ iSocketServ;

 		 /** Handle to policy server */

 		 RIpsecPolicyServ iPolicyServer;

 		 /** Handle to SADB socket */

 		 RSADB iSADB;

  		 TInetAddr iSourceAddr;

 		 TInetAddr iDestinationAddr;

 		 TUint8 iAuthAlg;

 		 TUint8 iEncAlg;

 		 TUint32 iSequenceNumber;

 		 /** Signifies whether a security policy has already been set */

 		 TBool iPolicySet;

 		 TPolicyHandlePckg iPolicyHandle;

 		 /** Used for removing old SA-s, managed as a FIFO queue */

 		 RArray<TUint32> iSubmittedSpiList; 

 		 /** Number of supported concurrent SA-s */

 		 TInt iMaxSpiNumber; 

 	};

 } // namespace StreamAccess

 #endif /* __IPSECKEYSTREAMSINK_H__ */