/* * Decompiled with CFR 0.152. * * Could not load the following classes: * com.l7tech.gateway.common.audit.AssertionMessages * com.l7tech.gateway.common.audit.AuditDetailMessage * com.l7tech.message.Message * com.l7tech.policy.assertion.AssertionStatus * com.l7tech.policy.assertion.PolicyAssertionException * com.l7tech.policy.assertion.xmlsec.WssEncryptElement * com.l7tech.security.xml.ElementEncryptionConfig * com.l7tech.security.xml.KeyInfoInclusionType * com.l7tech.security.xml.KeyReference * com.l7tech.util.CausedIOException * com.l7tech.util.ExceptionUtils * com.l7tech.xml.InvalidXpathException * com.l7tech.xml.xpath.CompilableXpath * com.l7tech.xml.xpath.DeferredFailureDomCompiledXpathHolder * com.l7tech.xml.xpath.XpathVariableFinder */ package com.l7tech.server.policy.assertion.xmlsec; import com.l7tech.gateway.common.audit.AssertionMessages; import com.l7tech.gateway.common.audit.AuditDetailMessage; import com.l7tech.message.Message; import com.l7tech.policy.assertion.AssertionStatus; import com.l7tech.policy.assertion.PolicyAssertionException; import com.l7tech.policy.assertion.xmlsec.WssEncryptElement; import com.l7tech.security.xml.ElementEncryptionConfig; import com.l7tech.security.xml.KeyInfoInclusionType; import com.l7tech.security.xml.KeyReference; import com.l7tech.server.message.AuthenticationContext; import com.l7tech.server.message.PolicyEnforcementContext; import com.l7tech.server.policy.assertion.xmlsec.AddWssEncryptionContext; import com.l7tech.server.policy.assertion.xmlsec.AddWssEncryptionSupport; import com.l7tech.server.policy.assertion.xmlsec.ServerAddWssEncryption; import com.l7tech.server.util.xml.PolicyEnforcementContextXpathVariableFinder; import com.l7tech.util.CausedIOException; import com.l7tech.util.ExceptionUtils; import com.l7tech.xml.InvalidXpathException; import com.l7tech.xml.xpath.CompilableXpath; import com.l7tech.xml.xpath.DeferredFailureDomCompiledXpathHolder; import com.l7tech.xml.xpath.XpathVariableFinder; import java.io.IOException; import org.w3c.dom.Element; import org.xml.sax.SAXException; public class ServerWssEncryptElement extends ServerAddWssEncryption { private final DeferredFailureDomCompiledXpathHolder d; private static final String[] e; public ServerWssEncryptElement(WssEncryptElement wssEncryptElement) throws IOException { super(wssEncryptElement); this.d = new DeferredFailureDomCompiledXpathHolder((CompilableXpath)((WssEncryptElement)this.assertion).getXpathExpression()); } @Override protected AssertionStatus doCheckRequest(PolicyEnforcementContext policyEnforcementContext, Message message, String string, AuthenticationContext authenticationContext) throws IOException, PolicyAssertionException { AddWssEncryptionContext addWssEncryptionContext; try { addWssEncryptionContext = this.buildEncryptionContext(policyEnforcementContext); } catch (AddWssEncryptionSupport.MultipleTokensException multipleTokensException) { this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_ENCRYPT_MORE_THAN_ONE_TOKEN); return AssertionStatus.BAD_REQUEST; } try { if (!addWssEncryptionContext.hasEncryptionKey()) { this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_ENCRYPT_NO_CERT_OR_SC_TOKEN); } } catch (AddWssEncryptionSupport.MultipleTokensException multipleTokensException) { throw ServerWssEncryptElement.a(multipleTokensException); } return this.a(message, string, addWssEncryptionContext, policyEnforcementContext); } /* * Unable to fully structure code */ private AssertionStatus a(Message var1_1, String var2_2, AddWssEncryptionContext var3_3, PolicyEnforcementContext var4_4) throws IOException, PolicyAssertionException { try { if (!var1_1.isSoap()) { this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_ENCRYPT_MESSAGE_NOT_SOAP, new String[]{var2_2}); return AssertionStatus.NOT_APPLICABLE; } } catch (InvalidXpathException v0) { throw ServerWssEncryptElement.a((Exception)v0); } catch (SAXException var5_5) { throw new CausedIOException((Throwable)var5_5); } try { block24: { block26: { block25: { block23: { block22: { var5_6 = var1_1.getXmlKnob().getDocumentReadOnly(); try { var6_7 = this.d.getCompiledXpath().rawSelectElements(var5_6, (XpathVariableFinder)new PolicyEnforcementContextXpathVariableFinder(var4_4)); } catch (InvalidXpathException var7_9) { v1 = new String[1]; var10_12 = ServerWssEncryptElement.e; v1[0] = var10_12[0] + ExceptionUtils.getMessage((Throwable)var7_9); this.logAndAudit((AuditDetailMessage)AssertionMessages.XPATH_PATTERN_INVALID_MORE_INFO, v1, ExceptionUtils.getDebugException((Throwable)var7_9)); return AssertionStatus.SERVER_ERROR; } try { if (var6_7 != null && var6_7.size() >= 1) break block22; } catch (SAXException v2) { throw ServerWssEncryptElement.a(v2); } this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_ENCRYPT_MESSAGE_NOT_ENCRYPTED, new String[]{var2_2}); return AssertionStatus.FALSIFIED; } var7_10 = var1_1.getSecurityKnob().getAlternateDecorationRequirements(var3_3.getRecipientContext()); for (Element var9_14 : var6_7) { var7_10.addElementToEncrypt(var9_14, new ElementEncryptionConfig(((WssEncryptElement)this.assertion).isEncryptContentsOnly())); } var7_10.setEncryptionAlgorithm(((WssEncryptElement)this.assertion).getXEncAlgorithm()); var7_10.setKeyEncryptionAlgorithm(((WssEncryptElement)this.assertion).getKeyEncryptionAlgorithm()); var8_13 = ((WssEncryptElement)this.assertion).getKeyReference(); if (var8_13 == null) ** GOTO lbl43 try { block27: { if (!KeyReference.SKI.getName().equals(var8_13)) break block23; break block27; catch (SAXException v3) { throw ServerWssEncryptElement.a(v3); } } var7_10.setEncryptionKeyInfoInclusionType(KeyInfoInclusionType.STR_SKI); break block24; } catch (SAXException v4) { throw ServerWssEncryptElement.a(v4); } } try { if (!KeyReference.ISSUER_SERIAL.getName().equals(var8_13)) break block25; var7_10.setEncryptionKeyInfoInclusionType(KeyInfoInclusionType.ISSUER_SERIAL); break block24; } catch (SAXException v5) { throw ServerWssEncryptElement.a(v5); } } try { if (!KeyReference.BST.getName().equals(var8_13)) break block26; var7_10.setEncryptionKeyInfoInclusionType(KeyInfoInclusionType.CERT); break block24; } catch (SAXException v6) { throw ServerWssEncryptElement.a(v6); } } try { if (KeyReference.KEY_NAME.getName().equals(var8_13)) { var7_10.setEncryptionKeyInfoInclusionType(KeyInfoInclusionType.KEY_NAME); } } catch (SAXException v7) { throw ServerWssEncryptElement.a(v7); } } this.applyDecorationRequirements(var4_4, var7_10, var3_3); this.logAndAudit((AuditDetailMessage)AssertionMessages.WSS_ENCRYPT_MESSAGE_ENCRYPTED, new String[]{var2_2, String.valueOf(var6_7.size())}); return AssertionStatus.NONE; } catch (SAXException var6_8) { var7_11 = ServerWssEncryptElement.e[1]; this.logAndAudit((AuditDetailMessage)AssertionMessages.EXCEPTION_SEVERE_WITH_MORE_INFO, new String[]{var7_11}, var6_8); return AssertionStatus.SERVER_ERROR; } } private static Exception a(Exception exception) { return exception; } /* * Enabled aggressive block sorting */ static { String[] stringArray = new String[2]; int n2 = 0; String string = "\u0018LKMI\"p6}FL@v|/r\n\\Spz2&\n7#}DWNv5'y^\u0019@l58qF\u0019Emv5qOWU\"s2sG\u0019Ujp`nOJQm{3y\nMN\"p.\u007fX@Qv"; int n3 = "\u0018LKMI\"p6}FL@v|/r\n\\Spz2&\n7#}DWNv5'y^\u0019@l58qF\u0019Emv5qOWU\"s2sG\u0019Ujp`nOJQm{3y\nMN\"p.\u007fX@Qv".length(); int n4 = 24; int n5 = -1; while (true) { int n6 = ++n5; stringArray[n2++] = ServerWssEncryptElement.c(86, ServerWssEncryptElement.a(string.substring(n6, n6 + n4))); if ((n5 += n4) >= n3) { e = stringArray; return; } n4 = string.charAt(n5); } } private static char[] a(String string) { char[] cArray = string.toCharArray(); if (cArray.length < 2) { cArray = cArray; cArray[0] = (char)(cArray[0] ^ 0x43); } return cArray; } /* * Handled impossible loop by duplicating code * Enabled aggressive block sorting */ private static String c(int n2, char[] cArray) { char[] cArray2; block11: { int n3; int n4; int n5; block10: { n5 = n2; cArray2 = cArray; n4 = cArray.length; n3 = 0; if (!true) break block10; n4 = n4; if (n4 <= n3) break block11; } do { n5 = n5; cArray2 = cArray2; int n6 = n3; cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) { case 0 -> 22; case 1 -> 74; case 2 -> 124; case 3 -> 111; case 4 -> 119; case 5 -> 84; default -> 67; }))); ++n3; n4 = n4; } while (n4 > n3); } return new String(cArray2).intern(); } }