/*
 * Decompiled with CFR 0.152.
 * 
 * Could not load the following classes:
 *  com.l7tech.common.http.GenericHttpClientFactory
 *  com.l7tech.common.io.CertUtils
 *  com.l7tech.common.io.WhirlycacheFactory
 *  com.l7tech.gateway.common.audit.Audit
 *  com.l7tech.gateway.common.audit.AuditDetailMessage
 *  com.l7tech.gateway.common.audit.SystemMessages
 *  com.l7tech.util.Config
 *  com.l7tech.util.TimeUnit
 *  com.whirlycott.cache.Cache
 *  org.jetbrains.annotations.Nullable
 */
package com.l7tech.server.security.cert;

import com.l7tech.common.http.GenericHttpClientFactory;
import com.l7tech.common.io.CertUtils;
import com.l7tech.common.io.WhirlycacheFactory;
import com.l7tech.gateway.common.audit.Audit;
import com.l7tech.gateway.common.audit.AuditDetailMessage;
import com.l7tech.gateway.common.audit.SystemMessages;
import com.l7tech.server.security.cert.OCSPClient;
import com.l7tech.server.security.cert.aa;
import com.l7tech.server.security.cert.m;
import com.l7tech.server.security.cert.n;
import com.l7tech.util.Config;
import com.l7tech.util.TimeUnit;
import com.whirlycott.cache.Cache;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Date;
import java.util.Set;
import org.jetbrains.annotations.Nullable;

public class OCSPCache {
    private static final int a;
    private static final ThreadLocal<Set<m>> b;
    private static final String c;
    private static final String d;
    private static final String e;
    static final String f;
    private final Cache g;
    private final GenericHttpClientFactory h;
    private final Config i;
    private static final String[] j;

    public OCSPCache(GenericHttpClientFactory genericHttpClientFactory, Config config) {
        if (genericHttpClientFactory == null) {
            String[] stringArray = j;
            throw new IllegalArgumentException(stringArray[6]);
        }
        try {
            if (config == null) {
                throw new IllegalArgumentException(j[2]);
            }
        }
        catch (IllegalArgumentException illegalArgumentException) {
            throw OCSPCache.a(illegalArgumentException);
        }
        this.h = genericHttpClientFactory;
        this.i = config;
        this.g = WhirlycacheFactory.createCache((String)j[3], (int)1000, (int)57, (String)WhirlycacheFactory.POLICY_LRU);
    }

    /*
     * WARNING - Removed try catching itself - possible behaviour change.
     */
    public OCSPClient.OCSPStatus getOCSPStatus(String string, X509Certificate x509Certificate, X509Certificate x509Certificate2, OCSPClient.OCSPCertificateAuthorizer oCSPCertificateAuthorizer, @Nullable Boolean bl2, Audit audit) throws OCSPClient.OCSPClientException {
        Object object;
        OCSPClient.OCSPStatus oCSPStatus;
        Set<m> set;
        m m2;
        block14: {
            OCSPClient.OCSPStatus oCSPStatus2;
            block13: {
                m2 = this.a(string, x509Certificate, this.a(bl2));
                set = b.get();
                try {
                    if (set.contains(m2)) {
                        throw new OCSPClientRecursionException(j[4] + String.valueOf(x509Certificate.getSubjectDN()) + j[14]);
                    }
                }
                catch (OCSPClient.OCSPClientException oCSPClientException) {
                    throw OCSPCache.a(oCSPClientException);
                }
                set.add(m2);
                oCSPStatus2 = null;
                n n2 = (n)this.g.retrieve((Object)m2);
                if (n2 != null) {
                    oCSPStatus2 = n2.a;
                }
                try {
                    if (n2 == null || n2.a()) break block13;
                }
                catch (OCSPClient.OCSPClientException oCSPClientException) {
                    throw OCSPCache.a(oCSPClientException);
                }
                oCSPStatus = n2.a;
                String[] stringArray = new String[2];
                String[] stringArray2 = j;
                stringArray[0] = stringArray2[1];
                stringArray[1] = x509Certificate.getSubjectDN().toString();
                audit.logAndAudit((AuditDetailMessage)SystemMessages.CERTVAL_REV_CACHE_HIT, stringArray);
                break block14;
            }
            String[] stringArray = new String[2];
            String[] stringArray3 = j;
            stringArray[0] = stringArray3[15];
            stringArray[1] = x509Certificate.getSubjectDN().toString();
            audit.logAndAudit((AuditDetailMessage)SystemMessages.CERTVAL_REV_CACHE_MISS, stringArray);
            object = new OCSPClient(this.h.createHttpClient(), string, x509Certificate2, oCSPCertificateAuthorizer);
            try {
                oCSPStatus = ((OCSPClient)object).getRevocationStatus(x509Certificate, this.a(bl2), true);
            }
            catch (OCSPClient.OCSPClientException oCSPClientException) {
                if (oCSPStatus2 != null) {
                    OCSPClient.OCSPStatus oCSPStatus3 = oCSPStatus2;
                    audit.logAndAudit((AuditDetailMessage)SystemMessages.CERTVAL_REV_USE_CACHE, new String[]{j[15], x509Certificate.getSubjectDN().toString(), new Date(oCSPStatus3.getExpiry()).toString()});
                    this.g.store((Object)m2, (Object)new n(oCSPStatus2, oCSPStatus3.getExpiry()), oCSPStatus3.getExpiry());
                    OCSPClient.OCSPStatus oCSPStatus4 = oCSPStatus3;
                    set.remove(m2);
                    return oCSPStatus4;
                }
                throw oCSPClientException;
            }
            long l2 = System.currentTimeMillis();
            long l3 = this.a(oCSPStatus.getExpiry(), l2);
            this.g.store((Object)m2, (Object)new n(oCSPStatus, l2 + l3), l3);
        }
        object = oCSPStatus;
        return object;
        finally {
            set.remove(m2);
        }
    }

    private long a(long l2, long l3) {
        long l4;
        long l5 = l2 <= 0L ? this.a() : ((l4 = l2 - l3) > this.c() ? this.c() : (l4 < this.b() ? this.b() : l4));
        return l5;
    }

    private long a() {
        return this.a(j[0]);
    }

    private long b() {
        return this.a(j[12]);
    }

    private long c() {
        return this.a(j[5]);
    }

    boolean a(@Nullable Boolean bl2) {
        boolean bl3;
        try {
            bl3 = bl2 != null ? bl2.booleanValue() : this.i.getBooleanProperty(j[7], true);
        }
        catch (IllegalArgumentException illegalArgumentException) {
            throw OCSPCache.a(illegalArgumentException);
        }
        return bl3;
    }

    private long a(String string) {
        return this.i.getTimeUnitProperty(string, (long)a);
    }

    private m a(String string, X509Certificate x509Certificate, boolean bl2) throws OCSPClient.OCSPClientException {
        try {
            return new m(string, x509Certificate, bl2);
        }
        catch (CertificateException certificateException) {
            throw new OCSPClient.OCSPClientException(j[8] + CertUtils.getCertIdentifyingInformation((X509Certificate)x509Certificate) + "]", certificateException);
        }
    }

    /*
     * Unable to fully structure code
     */
    static {
        block10: {
            block9: {
                var5 = new String[16];
                var3_1 = 0;
                var2_2 = "n.3BmT\bNk?BR~)g\u0004Q\u0006\tj\u001dm (LGe\u0018q+<SE76k6.\u001aLx/>'?\u001aLb7r\u0011Q\u0006\tjpr(n*4IGT:}-?(L 9OPd2h zUP78w79ONv)>\n\u0019ir7){4/_Qc{x*(\u001a\u0005\u0015n.3BmT\bNk7[ZR#n,(Ccp>\"v1.Ja{2{+.|Ct/q7#\u001aOb(je4UV79{e4ON{\u0011n.3BmT\bNk/IGY4p&?\u001e[7(UP7+l*9_Qd2p\"zYGe/w#3YCc>>\u001e\u0015n.3BmT\bNk7[ZR#n,(Ccp>\u000fn.3BmT\bNk?BR~)g\u0011n.3BmT\bNk/IGY4p&?\u0015n.3BmT\bNk7SLR#n,(Ccp>\u0015n.3BmT\bNk7SLR#n,(Ccp>";
                var4_3 = "n.3BmT\bNk?BR~)g\u0004Q\u0006\tj\u001dm (LGe\u0018q+<SE76k6.\u001aLx/>'?\u001aLb7r\u0011Q\u0006\tjpr(n*4IGT:}-?(L 9OPd2h zUP78w79ONv)>\n\u0019ir7){4/_Qc{x*(\u001a\u0005\u0015n.3BmT\bNk7[ZR#n,(Ccp>\"v1.Ja{2{+.|Ct/q7#\u001aOb(je4UV79{e4ON{\u0011n.3BmT\bNk/IGY4p&?\u001e[7(UP7+l*9_Qd2p\"zYGe/w#3YCc>>\u001e\u0015n.3BmT\bNk7[ZR#n,(Ccp>\u000fn.3BmT\bNk?BR~)g\u0011n.3BmT\bNk/IGY4p&?\u0015n.3BmT\bNk7SLR#n,(Ccp>\u0015n.3BmT\bNk7SLR#n,(Ccp>".length();
                var1_4 = 15;
                var0_5 = -1;
lbl7:
                // 2 sources

                while (true) {
                    v0 = 119;
                    v1 = ++var0_5;
                    v2 = var2_2.substring(v1, v1 + var1_4);
                    v3 = -1;
                    break block9;
                    break;
                }
lbl13:
                // 1 sources

                while (true) {
                    var5[var3_1++] = OCSPCache.a(v0, OCSPCache.b(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    var2_2 = "[\t\u00043dk\b";
                    var4_3 = "[\t\u00043dk\b".length();
                    var1_4 = 2;
                    var0_5 = -1;
lbl22:
                    // 2 sources

                    while (true) {
                        v0 = 21;
                        v4 = ++var0_5;
                        v2 = var2_2.substring(v4, v4 + var1_4);
                        v3 = 0;
                        break block9;
                        break;
                    }
                    break;
                }
lbl28:
                // 1 sources

                while (true) {
                    var5[var3_1++] = OCSPCache.a(v0, OCSPCache.b(v2));
                    if ((var0_5 += var1_4) < var4_3) {
                        var1_4 = var2_2.charAt(var0_5);
                        ** continue;
                    }
                    break block10;
                    break;
                }
            }
            switch (v3) {
                default: {
                    ** continue;
                }
                ** case 0:
lbl39:
                // 1 sources

                ** continue;
            }
        }
        OCSPCache.j = var5;
        OCSPCache.c = OCSPCache.j[10];
        OCSPCache.d = OCSPCache.j[13];
        OCSPCache.e = OCSPCache.j[9];
        OCSPCache.f = OCSPCache.j[11];
        OCSPCache.a = TimeUnit.MINUTES.getMultiplier();
        OCSPCache.b = new aa();
    }

    private static Exception a(Exception exception) {
        return exception;
    }

    private static char[] b(String string) {
        char[] cArray = string.toCharArray();
        if (cArray.length < 2) {
            cArray = cArray;
            cArray[0] = (char)(cArray[0] ^ 0x2C);
        }
        return cArray;
    }

    /*
     * Handled impossible loop by duplicating code
     * Enabled aggressive block sorting
     */
    private static String a(int n2, char[] cArray) {
        char[] cArray2;
        block11: {
            int n3;
            int n4;
            int n5;
            block10: {
                n5 = n2;
                cArray2 = cArray;
                n4 = cArray.length;
                n3 = 0;
                if (!true) break block10;
                n4 = n4;
                if (n4 <= n3) break block11;
            }
            do {
                n5 = n5;
                cArray2 = cArray2;
                int n6 = n3;
                cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) {
                    case 0 -> 105;
                    case 1 -> 50;
                    case 2 -> 45;
                    case 3 -> 77;
                    case 4 -> 85;
                    case 5 -> 96;
                    default -> 44;
                })));
                ++n3;
                n4 = n4;
            } while (n4 > n3);
        }
        return new String(cArray2).intern();
    }

    public static final class OCSPClientRecursionException
    extends OCSPClient.OCSPClientException {
        static final long serialVersionUID = 1538036374249979818L;

        public OCSPClientRecursionException(String string) {
            super(string);
        }

        public OCSPClientRecursionException(String string, Throwable throwable) {
            super(string, throwable);
        }
    }
}