/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.gateway.common.audit.AssertionMessages
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.message.HttpRequestKnob
 *  com.l7tech.message.Message
 *  com.l7tech.policy.assertion.AssertionStatus
 *  com.l7tech.policy.assertion.SslAssertion
 *  com.l7tech.policy.assertion.credential.CredentialFinderException
 *  com.l7tech.policy.assertion.credential.LoginCredentials
 *  com.l7tech.policy.assertion.credential.http.HttpClientCert
 *  com.l7tech.security.token.SecurityToken
 *  com.l7tech.security.token.http.TlsClientCertToken
 */
package com.l7tech.server.policy.assertion.credential.http;

import com.l7tech.gateway.common.audit.AssertionMessages;
import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.message.HttpRequestKnob;
import com.l7tech.message.Message;
import com.l7tech.policy.assertion.AssertionStatus;
import com.l7tech.policy.assertion.SslAssertion;
import com.l7tech.policy.assertion.credential.CredentialFinderException;
import com.l7tech.policy.assertion.credential.LoginCredentials;
import com.l7tech.policy.assertion.credential.http.HttpClientCert;
import com.l7tech.security.token.SecurityToken;
import com.l7tech.security.token.http.TlsClientCertToken;
import com.l7tech.server.message.PolicyEnforcementContext;
import com.l7tech.server.policy.assertion.credential.ServerCredentialSourceAssertion;
import java.io.IOException;
import java.security.cert.CertificateExpiredException;
import java.security.cert.CertificateNotYetValidException;
import java.util.Map;

public class ServerHttpClientCert
extends ServerCredentialSourceAssertion<HttpClientCert> {
    public static final String PARAM_HTTP_X509CERT;
    private static final String[] d;

    public ServerHttpClientCert(HttpClientCert httpClientCert) {
        super(httpClientCert);
    }

    /*
     * Unable to fully structure code
     */
    @Override
    protected LoginCredentials findCredentials(Message var1_1, Map<String, String> var2_2) throws IOException, CredentialFinderException {
        block18: {
            var3_3 = (HttpRequestKnob)var1_1.getKnob(HttpRequestKnob.class);
            try {
                if (var3_3 == null) {
                    this.logAndAudit((AuditDetailMessage)AssertionMessages.HTTPCLIENTCERT_NOT_HTTP);
                    return null;
                }
            }
            catch (CertificateExpiredException v0) {
                throw ServerHttpClientCert.a(v0);
            }
            var4_4 = var3_3.getClientCertificate();
            if (var4_4 == null) ** GOTO lbl17
            try {
                block20: {
                    if (var4_4.length >= 1) break block18;
                    break block20;
                    catch (CertificateExpiredException v1) {
                        throw ServerHttpClientCert.a(v1);
                    }
                }
                this.logAndAudit((AuditDetailMessage)AssertionMessages.HTTPCLIENTCERT_NO_CERT);
                return null;
            }
            catch (CertificateExpiredException v2) {
                throw ServerHttpClientCert.a(v2);
            }
        }
        var5_5 = var4_4[0];
        try {
            if (var5_5 == null) {
                throw new CredentialFinderException(ServerHttpClientCert.d[0]);
            }
        }
        catch (CertificateExpiredException v3) {
            throw ServerHttpClientCert.a(v3);
        }
        try {
            try {
                if (((HttpClientCert)this.assertion).isCheckCertValidity()) {
                    var5_5.checkValidity();
                }
            }
            catch (IOException v4) {
                throw ServerHttpClientCert.a(v4);
            }
        }
        catch (CertificateExpiredException var6_6) {
            var7_9 = ServerHttpClientCert.d;
            throw new CredentialFinderException(var7_9[3], (Throwable)var6_6, AssertionStatus.AUTH_FAILED);
        }
        catch (CertificateNotYetValidException var6_7) {
            throw new CredentialFinderException(ServerHttpClientCert.d[2], (Throwable)var6_7, AssertionStatus.AUTH_FAILED);
        }
        var6_8 = new TlsClientCertToken(var5_5);
        try {
            v5 = this;
            v6 = AssertionMessages.HTTPCLIENTCERT_FOUND;
            v7 = new String[1];
            v8 = v7;
            v9 = v7;
            v10 = 0;
            v11 = var6_8.getCertCn() == null ? var6_8.getCertDn() : var6_8.getCertCn();
        }
        catch (CertificateExpiredException v12) {
            throw ServerHttpClientCert.a(v12);
        }
        v8[v10] = v11;
        v5.logAndAudit((AuditDetailMessage)v6, v9);
        return LoginCredentials.makeLoginCredentials((SecurityToken)var6_8, SslAssertion.class);
    }

    @Override
    protected AssertionStatus checkCredentials(LoginCredentials loginCredentials, Map<String, String> map) throws CredentialFinderException {
        return AssertionStatus.NONE;
    }

    @Override
    protected void challenge(PolicyEnforcementContext policyEnforcementContext, Map<String, String> map) {
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[4];
                var3_1 = 0;
                var2_2 = "I(\u0007^u.Ku)K[;mMo<\u0002\\'m<\u0000S'9O).\u000e@#!Kss\u0019W$8Kt)Ej`}\u0017D8\u0019F<+Gd<\u001fW";
                var4_3 = "I(\u0007^u.Ku)K[;mMo<\u0002\\'m<\u0000S'9O).\u000e@#!Kss\u0019W$8Kt)Ej`}\u0017D8\u0019F<+Gd<\u001fW".length();
                var1_4 = 18;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 89;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerHttpClientCert.c(v0, ServerHttpClientCert.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "G2\u0001T8:\rG;\u001aE?(Dg?\u001cTv'^$0\u0007Ev7Hp~\u001eP:'I\u001eG2\u0001T8:\rG;\u001aE?(Dg?\u001cTv&Lw~\rI&'_a:";
                    var4_3 = "G2\u0001T8:\rG;\u001aE?(Dg?\u001cTv'^$0\u0007Ev7Hp~\u001eP:'I\u001eG2\u0001T8:\rG;\u001aE?(Dg?\u001cTv&Lw~\rI&'_a:".length();
                    var1_4 = 35;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 90;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = ServerHttpClientCert.c(v0, ServerHttpClientCert.a(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        ServerHttpClientCert.d = var5;
        ServerHttpClientCert.PARAM_HTTP_X509CERT = ServerHttpClientCert.d[1];
    }

    private static char[] a(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x77);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String c(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 94;
                    case 1 -> 4;
                    case 2 -> 50;
                    case 3 -> 107;
                    case 4 -> 12;
                    case 5 -> 20;
                    default -> 119;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }
}