/* * Decompiled with CFR 0.152. * * Could not load the following classes: * com.l7tech.common.http.GenericHttpClient * com.l7tech.common.http.GenericHttpHeader * com.l7tech.common.http.GenericHttpRequestParams * com.l7tech.common.http.GenericHttpResponse * com.l7tech.common.http.HttpConstants * com.l7tech.common.http.HttpHeader * com.l7tech.common.http.HttpMethod * com.l7tech.common.http.RerunnableHttpRequest * com.l7tech.common.io.CertUtils * com.l7tech.common.mime.ContentTypeHeader * com.l7tech.security.cert.CertVerifier * com.l7tech.security.prov.JceProvider * com.l7tech.security.prov.ProviderUtil * com.l7tech.security.prov.bc.api.BCProxy * com.l7tech.security.types.CertificateValidationResult * com.l7tech.util.ConfigFactory * com.l7tech.util.HexUtils * com.l7tech.util.TimeUnit * org.bouncycastle.asn1.ASN1BitString * org.bouncycastle.asn1.ASN1Encodable * org.bouncycastle.asn1.ASN1InputStream * org.bouncycastle.asn1.ASN1Integer * org.bouncycastle.asn1.ASN1Object * org.bouncycastle.asn1.ASN1OctetString * org.bouncycastle.asn1.DERNull * org.bouncycastle.asn1.DEROctetString * org.bouncycastle.asn1.DERSequence * org.bouncycastle.asn1.ocsp.CertID * org.bouncycastle.asn1.ocsp.OCSPObjectIdentifiers * org.bouncycastle.asn1.oiw.OIWObjectIdentifiers * org.bouncycastle.asn1.x509.AlgorithmIdentifier * org.bouncycastle.asn1.x509.Extension * org.bouncycastle.asn1.x509.Extensions * org.bouncycastle.asn1.x509.SubjectPublicKeyInfo * org.bouncycastle.cert.X509CertificateHolder * org.bouncycastle.cert.jcajce.JcaX509CertificateConverter * org.bouncycastle.cert.ocsp.BasicOCSPResp * org.bouncycastle.cert.ocsp.CertificateID * org.bouncycastle.cert.ocsp.CertificateStatus * org.bouncycastle.cert.ocsp.OCSPException * org.bouncycastle.cert.ocsp.OCSPReq * org.bouncycastle.cert.ocsp.OCSPReqBuilder * org.bouncycastle.cert.ocsp.OCSPResp * org.bouncycastle.cert.ocsp.RevokedStatus * org.bouncycastle.cert.ocsp.SingleResp * org.bouncycastle.cert.ocsp.UnknownStatus * org.bouncycastle.operator.DefaultAlgorithmNameFinder */ package com.l7tech.server.security.cert; import com.l7tech.common.http.GenericHttpClient; import com.l7tech.common.http.GenericHttpHeader; import com.l7tech.common.http.GenericHttpRequestParams; import com.l7tech.common.http.GenericHttpResponse; import com.l7tech.common.http.HttpConstants; import com.l7tech.common.http.HttpHeader; import com.l7tech.common.http.HttpMethod; import com.l7tech.common.http.RerunnableHttpRequest; import com.l7tech.common.io.CertUtils; import com.l7tech.common.mime.ContentTypeHeader; import com.l7tech.security.cert.CertVerifier; import com.l7tech.security.prov.JceProvider; import com.l7tech.security.prov.ProviderUtil; import com.l7tech.security.prov.bc.api.BCProxy; import com.l7tech.security.types.CertificateValidationResult; import com.l7tech.util.ConfigFactory; import com.l7tech.util.HexUtils; import com.l7tech.util.TimeUnit; import java.io.ByteArrayInputStream; import java.io.IOException; import java.math.BigInteger; import java.net.MalformedURLException; import java.net.URL; import java.security.GeneralSecurityException; import java.security.MessageDigest; import java.security.NoSuchAlgorithmException; import java.security.PublicKey; import java.security.SecureRandom; import java.security.Signature; import java.security.cert.Certificate; import java.security.cert.CertificateException; import java.security.cert.X509Certificate; import java.util.ArrayList; import java.util.Arrays; import java.util.Date; import java.util.List; import java.util.Random; import java.util.Set; import java.util.logging.Level; import java.util.logging.Logger; import javax.security.auth.x500.X500Principal; import org.bouncycastle.asn1.ASN1BitString; import org.bouncycastle.asn1.ASN1Encodable; import org.bouncycastle.asn1.ASN1InputStream; import org.bouncycastle.asn1.ASN1Integer; import org.bouncycastle.asn1.ASN1Object; import org.bouncycastle.asn1.ASN1OctetString; import org.bouncycastle.asn1.DERNull; import org.bouncycastle.asn1.DEROctetString; import org.bouncycastle.asn1.DERSequence; import org.bouncycastle.asn1.ocsp.CertID; import org.bouncycastle.asn1.ocsp.OCSPObjectIdentifiers; import org.bouncycastle.asn1.oiw.OIWObjectIdentifiers; import org.bouncycastle.asn1.x509.AlgorithmIdentifier; import org.bouncycastle.asn1.x509.Extension; import org.bouncycastle.asn1.x509.Extensions; import org.bouncycastle.asn1.x509.SubjectPublicKeyInfo; import org.bouncycastle.cert.X509CertificateHolder; import org.bouncycastle.cert.jcajce.JcaX509CertificateConverter; import org.bouncycastle.cert.ocsp.BasicOCSPResp; import org.bouncycastle.cert.ocsp.CertificateID; import org.bouncycastle.cert.ocsp.CertificateStatus; import org.bouncycastle.cert.ocsp.OCSPException; import org.bouncycastle.cert.ocsp.OCSPReq; import org.bouncycastle.cert.ocsp.OCSPReqBuilder; import org.bouncycastle.cert.ocsp.OCSPResp; import org.bouncycastle.cert.ocsp.RevokedStatus; import org.bouncycastle.cert.ocsp.SingleResp; import org.bouncycastle.cert.ocsp.UnknownStatus; import org.bouncycastle.operator.DefaultAlgorithmNameFinder; public class OCSPClient { public static final String OID_AIA_OCSP_URL; private static final BCProxy a; private static final String b; private static final String c; private static final long d; private static final long e; private static final String f; private static final String g; private static final String h; private static final String i; private static final Random j; private static final Logger k; private final GenericHttpClient l; private final String m; private final X509Certificate n; private final OCSPCertificateAuthorizer o; private static final String[] p; public OCSPClient(GenericHttpClient genericHttpClient, String string, X509Certificate x509Certificate, OCSPCertificateAuthorizer oCSPCertificateAuthorizer) { if (genericHttpClient == null) { String[] stringArray = p; throw new IllegalArgumentException(stringArray[37]); } try { if (string == null) { throw new IllegalArgumentException(p[48]); } } catch (IllegalArgumentException illegalArgumentException) { throw OCSPClient.a(illegalArgumentException); } try { if (x509Certificate == null) { throw new IllegalArgumentException(p[42]); } } catch (IllegalArgumentException illegalArgumentException) { throw OCSPClient.a(illegalArgumentException); } this.l = genericHttpClient; this.m = string; this.n = x509Certificate; this.o = oCSPCertificateAuthorizer; } public OCSPStatus getRevocationStatus(X509Certificate x509Certificate, boolean bl2, boolean bl3) throws OCSPClientException { OCSPStatus oCSPStatus = this.a(x509Certificate, bl2, bl3); return oCSPStatus; } public boolean isPermittedByIssuer(X509Certificate x509Certificate) throws OCSPClientException { boolean bl2; block4: { bl2 = false; try { List list = x509Certificate.getExtendedKeyUsage(); try { if (list == null || !list.contains(p[36])) break block4; } catch (GeneralSecurityException generalSecurityException) { throw OCSPClient.a(generalSecurityException); } x509Certificate.checkValidity(); CertVerifier.cachedVerify((X509Certificate)x509Certificate, (X509Certificate)this.n); bl2 = true; } catch (GeneralSecurityException generalSecurityException) { throw new OCSPClientException(p[51], generalSecurityException); } } return bl2; } public boolean shouldCheckRevocation(X509Certificate x509Certificate) throws OCSPClientException { block4: { Set set = x509Certificate.getNonCriticalExtensionOIDs(); try { try { if (set == null || !set.contains(p[7])) break block4; } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } k.log(Level.FINE, p[8], x509Certificate.getSubjectDN().getName()); return false; } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } } return true; } static CertID a(X509Certificate x509Certificate, BigInteger bigInteger) throws OCSPException { CertID certID; PublicKey publicKey; DEROctetString dEROctetString; X500Principal x500Principal; MessageDigest messageDigest; AlgorithmIdentifier algorithmIdentifier; try { algorithmIdentifier = new AlgorithmIdentifier(OIWObjectIdentifiers.idSHA1, (ASN1Encodable)DERNull.INSTANCE); String[] stringArray = p; messageDigest = JceProvider.getMessageDigest((String)stringArray[39], null); x500Principal = x509Certificate.getSubjectX500Principal(); messageDigest.update(x500Principal.getEncoded()); dEROctetString = new DEROctetString(messageDigest.digest()); publicKey = x509Certificate.getPublicKey(); } catch (NoSuchAlgorithmException noSuchAlgorithmException) { String[] stringArray = p; throw new OCSPException(stringArray[28] + noSuchAlgorithmException, (Throwable)noSuchAlgorithmException); } x500Principal = new ASN1InputStream(publicKey.getEncoded()); try { SubjectPublicKeyInfo subjectPublicKeyInfo = SubjectPublicKeyInfo.getInstance((Object)x500Principal.readObject()); ASN1BitString aSN1BitString = a.subjectPublicKeyInfoGetPublicKeyData((Object)subjectPublicKeyInfo); messageDigest.update(aSN1BitString.getBytes()); DEROctetString dEROctetString2 = new DEROctetString(messageDigest.digest()); ASN1Integer aSN1Integer = new ASN1Integer(bigInteger); certID = new CertID(algorithmIdentifier, (ASN1OctetString)dEROctetString, (ASN1OctetString)dEROctetString2, aSN1Integer); } catch (Throwable throwable) { try { try { x500Principal.close(); } catch (Throwable throwable2) { throwable.addSuppressed(throwable2); } throw throwable; } catch (IOException iOException) { throw new OCSPException(p[22] + iOException, (Throwable)iOException); } } x500Principal.close(); return certID; } byte[] a() { byte[] byArray = new byte[8]; j.nextBytes(byArray); return byArray; } long b() { return System.currentTimeMillis(); } private OCSPStatus a(X509Certificate x509Certificate, boolean bl2, boolean bl3) throws OCSPClientException { OCSPStatus oCSPStatus; try { byte[] byArray; CertificateID certificateID = new CertificateID(OCSPClient.a(this.n, x509Certificate.getSerialNumber())); try { byArray = bl2 ? this.a() : null; } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } byte[] byArray2 = byArray; OCSPReq oCSPReq = OCSPClient.a(certificateID, byArray2); oCSPStatus = this.a(this.m, oCSPReq, certificateID, bl3, byArray2); } catch (IOException | OCSPException throwable) { throw new OCSPClientException(p[50], throwable); } return oCSPStatus; } private static OCSPReq a(CertificateID certificateID, byte[] byArray) throws OCSPException, IOException { OCSPReqBuilder oCSPReqBuilder = new OCSPReqBuilder(); oCSPReqBuilder.addRequest(certificateID); ArrayList arrayList = new ArrayList(); try { arrayList.add(new Extension(OCSPObjectIdentifiers.id_pkix_ocsp_response, false, (ASN1OctetString)new DEROctetString(new DERSequence((ASN1Encodable[])new ASN1Object[]{OCSPObjectIdentifiers.id_pkix_ocsp_basic}).getEncoded(p[5])))); if (byArray != null) { arrayList.add(new Extension(OCSPObjectIdentifiers.id_pkix_ocsp_nonce, false, (ASN1OctetString)new DEROctetString(byArray))); } } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } try { if (!arrayList.isEmpty()) { oCSPReqBuilder.setRequestExtensions(new Extensions(arrayList.toArray(new Extension[arrayList.size()]))); } } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } return oCSPReqBuilder.build(); } /* * Loose catch block */ private OCSPStatus a(String string, OCSPReq oCSPReq, CertificateID certificateID, boolean bl2, byte[] byArray) throws OCSPClientException { GenericHttpRequestParams genericHttpRequestParams; byte[] byArray2; URL uRL; try { uRL = new URL(string); } catch (MalformedURLException malformedURLException) { String[] stringArray = p; throw new OCSPClientException(stringArray[24] + string + stringArray[31], malformedURLException); } try { byArray2 = oCSPReq.getEncoded(); genericHttpRequestParams = new GenericHttpRequestParams(uRL); String[] stringArray = p; genericHttpRequestParams.setContentType(ContentTypeHeader.parseValue((String)stringArray[53])); genericHttpRequestParams.addExtraHeader((HttpHeader)new GenericHttpHeader(HttpConstants.HEADER_ACCEPT, stringArray[26])); genericHttpRequestParams.setFollowRedirects(false); genericHttpRequestParams.setContentLength(Long.valueOf(byArray2.length)); } catch (IOException iOException) { String[] stringArray = p; throw new OCSPClientException(stringArray[32], iOException); } RerunnableHttpRequest rerunnableHttpRequest = (RerunnableHttpRequest)this.l.createRequest(HttpMethod.POST, genericHttpRequestParams); rerunnableHttpRequest.setInputStreamFactory(() -> new ByteArrayInputStream(byArray2)); GenericHttpResponse genericHttpResponse = rerunnableHttpRequest.getResponse(); int n2 = genericHttpResponse.getStatus(); try { k.log(Level.FINER, p[20], new Object[]{n2, string}); if (n2 != 200) { throw new OCSPClientException(p[29] + n2 + p[1] + string + p[21]); } } catch (MalformedURLException malformedURLException) { throw OCSPClient.a(malformedURLException); } OCSPResp oCSPResp = new OCSPResp(genericHttpResponse.getInputStream()); OCSPStatus oCSPStatus = this.a(oCSPResp, certificateID, bl2, byArray); try { if (genericHttpResponse != null) { genericHttpResponse.close(); } } catch (MalformedURLException malformedURLException) { throw OCSPClient.a(malformedURLException); } try { if (rerunnableHttpRequest != null) { rerunnableHttpRequest.close(); } } catch (MalformedURLException malformedURLException) { throw OCSPClient.a(malformedURLException); } return oCSPStatus; { catch (Throwable throwable) { try { try { if (genericHttpResponse != null) { try { genericHttpResponse.close(); } catch (Throwable throwable2) { throwable.addSuppressed(throwable2); } } throw throwable; } catch (Throwable throwable3) { if (rerunnableHttpRequest != null) { try { rerunnableHttpRequest.close(); } catch (Throwable throwable4) { throwable3.addSuppressed(throwable4); } } throw throwable3; } } catch (IOException iOException) { throw new OCSPClientException(p[6], iOException); } } } } private OCSPStatus a(OCSPResp oCSPResp, CertificateID certificateID, boolean bl2, byte[] byArray) throws OCSPClientException, IOException { int n2 = oCSPResp.getStatus(); try { if (k.isLoggable(Level.FINER)) { k.log(Level.FINER, p[25], n2); } } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } return switch (n2) { case 0 -> this.b(oCSPResp, certificateID, bl2, byArray); case 1 -> { String[] var7_7 = p; throw new OCSPClientStatusException(var7_7[14]); } case 2 -> { String[] var7_8 = p; throw new OCSPClientStatusException(var7_8[27]); } case 3 -> { String[] var7_9 = p; throw new OCSPClientStatusException(var7_9[33]); } case 5 -> { String[] var7_10 = p; throw new OCSPClientStatusException(var7_10[41]); } case 6 -> { String[] var7_11 = p; throw new OCSPClientStatusException(var7_11[15]); } default -> throw new OCSPClientStatusException(p[0] + n2); }; } /* * Could not resolve type clashes * Loose catch block */ private OCSPStatus b(OCSPResp oCSPResp, CertificateID certificateID, boolean bl2, byte[] byArray) throws OCSPClientException, IOException { BasicOCSPResp basicOCSPResp; Object object; OCSPStatus oCSPStatus = null; try { block36: { String string; OCSPClientException oCSPClientException; OCSPClientException oCSPClientException2; block38: { block37: { object = oCSPResp.getResponseObject(); if (object instanceof BasicOCSPResp) break block36; try { block41: { OCSPClientException oCSPClientException3; oCSPClientException2 = oCSPClientException3; oCSPClientException = oCSPClientException3; if (object != null) break block37; break block41; catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } } string = p[11]; break block38; } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } } string = object.getClass().getName(); } String[] stringArray = p; oCSPClientException2(stringArray[38] + string); throw oCSPClientException; } basicOCSPResp = (BasicOCSPResp)object; } catch (OCSPException oCSPException) { String[] stringArray = p; throw new OCSPClientException(stringArray[40], oCSPException); } this.a(basicOCSPResp, bl2); if (byArray != null) { Object[] objectArray; object = null; Extension extension = basicOCSPResp.getExtension(OCSPObjectIdentifiers.id_pkix_ocsp_nonce); if (extension != null && (objectArray = (Object[])extension.getExtnValue().getEncoded()) != null) { try (ASN1InputStream aSN1InputStream = new ASN1InputStream((byte[])objectArray);){ ASN1OctetString aSN1OctetString = ASN1OctetString.getInstance((Object)aSN1InputStream.readObject()); object = aSN1OctetString.getOctets(); } catch (IOException iOException) { String[] stringArray = p; throw new OCSPClientException(stringArray[12], iOException); } } try { if (object == null) { throw new OCSPClientMissingNonceException(p[2]); } } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } try { if (!Arrays.equals(byArray, (byte[])object)) { throw new OCSPClientMismatchNonceException(p[35] + HexUtils.hexDump((byte[])byArray) + p[9] + HexUtils.hexDump((byte[])object)); } } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } } long l2 = this.b(); for (SingleResp singleResp : basicOCSPResp.getResponses()) { long l3; block40: { if (!singleResp.getCertID().equals((Object)certificateID)) continue; Date date = singleResp.getThisUpdate(); try { try { if (date != null && l2 - date.getTime() <= d) break block40; } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } throw new OCSPClientException(p[44]); } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } } Date date = singleResp.getNextUpdate(); if (date == null) { l3 = l2; } else { l3 = date.getTime(); try { if (l3 + e <= l2) { throw new OCSPClientException(p[10]); } } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } } CertificateStatus certificateStatus = singleResp.getCertStatus(); if (certificateStatus instanceof RevokedStatus) { oCSPStatus = new OCSPStatus(l3, CertificateValidationResult.REVOKED); break; } if (certificateStatus instanceof UnknownStatus) { oCSPStatus = new OCSPStatus(l3, CertificateValidationResult.UNKNOWN); break; } oCSPStatus = new OCSPStatus(l3, CertificateValidationResult.OK); break; } try { if (oCSPStatus == null) { throw new OCSPClientException(p[30]); } } catch (OCSPException oCSPException) { throw OCSPClient.a((Exception)((Object)oCSPException)); } return oCSPStatus; } /* * Could not resolve type clashes * Loose catch block */ private void a(BasicOCSPResp basicOCSPResp, boolean bl2) throws OCSPClientException { block17: { String string = new DefaultAlgorithmNameFinder().getAlgorithmName(basicOCSPResp.getSignatureAlgorithmID()); ArrayList arrayList = new ArrayList(); String[] stringArray = p; JcaX509CertificateConverter jcaX509CertificateConverter = new JcaX509CertificateConverter().setProvider(ConfigFactory.getProperty((String)stringArray[16], (String)stringArray[19])); for (X509CertificateHolder x509CertificateHolder : basicOCSPResp.getCerts()) { try { arrayList.add(jcaX509CertificateConverter.getCertificate(x509CertificateHolder)); } catch (CertificateException certificateException) { stringArray = p; throw new OCSPClientException(stringArray[13], certificateException); } } X509Certificate x509Certificate = this.o.getAuthorizedSigner(this, arrayList.toArray(new X509Certificate[arrayList.size()])); try { block15: { byte[] byArray; Object[] objectArray; block16: { objectArray = basicOCSPResp.getTBSResponseData(); byArray = basicOCSPResp.getSignature(); if (byArray == null) break block15; try { block18: { if (x509Certificate != null) break block16; break block18; catch (CertificateException certificateException) { throw OCSPClient.a(certificateException); } } throw new OCSPClientException(p[17]); } catch (CertificateException certificateException) { throw OCSPClient.a(certificateException); } } Signature signature = Signature.getInstance(string); try { signature.initVerify(this.a(x509Certificate)); signature.update((byte[])objectArray); if (!signature.verify(byArray)) { throw new OCSPClientException(p[43]); } break block17; } catch (CertificateException certificateException) { throw OCSPClient.a(certificateException); } } try { if (bl2) { throw new OCSPClientException(p[55]); } } catch (CertificateException certificateException) { throw OCSPClient.a(certificateException); } } catch (GeneralSecurityException generalSecurityException) { throw new OCSPClientException(p[47], generalSecurityException); } } } private PublicKey a(Certificate certificate) throws OCSPClientException { block11: { if (certificate instanceof X509Certificate) { X509Certificate x509Certificate = (X509Certificate)certificate; Set set = x509Certificate.getCriticalExtensionOIDs(); try { try { if (set == null || set.isEmpty()) break block11; } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } if (!set.contains(CertUtils.X509_OID_KEY_USAGE_EXTENSION)) break block11; } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } boolean[] blArray = x509Certificate.getKeyUsage(); try { try { try { if (blArray == null || blArray[0]) break block11; } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } if (blArray[1]) break block11; } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } throw new OCSPClientException(p[4]); } catch (OCSPClientException oCSPClientException) { throw OCSPClient.a(oCSPClientException); } } } return certificate.getPublicKey(); } /* * Unable to fully structure code */ static { block10: { block9: { var5 = new String[56]; var3_1 = 0; var2_2 = "sAbx[n+RJc dH\u001bv\u000fUeX{'H\\b ny:I]= x\u007f)RZt Hd,C\u000f\u0012\u0001\u000farDfhTJtpDe,C]''?ilTP\u000be'HLb \\j;\u0006]bq^b:CK'b^\u007fhH@s [y-UJit\u000bb&\u0006[oe\u000by-U_hnXnhKJtsJl-\u0018G_wlBh)RFhn\u0004d+U_*rNz=C\\s;ilTP\u000by-U_hnXnhUF`nJ\u007f=TJ'vJg!BNsiDeh@NnlNod\u0006xuoElhMJ~ ^x)AJ)\u0003bjU\u001fn{SP\u000bn:T@u O~:OA` dH\u001bv\u000fueZ~-U[)\u0014\u0017\u00014.\u001d%y\b\u001a)5\u0005CilTP\u000bx!AAnnL++C]siMb+G[b P;5\u0006Gfs\u000b\u007f C\u000fnd\u0006{#OW*oHx8\u000bAhcCn+M\u000fbx_n&UFhn\n\n\u000feu_+/I['(ilTP\u000by-U_hnXnhO\\'s_j$C\u000f/nNs<\u0006ZwdJ\u007f-\u0006Kre\u0002\u0004hzKL\u001fc]uoY+8T@deXx!HH'rNx8IAte\u000be'HLb/c]uoY+8T@deXx!HH'cNyOKbrOilTP\u000by-U_hnXnhO\\'sBl&CK'b^\u007fhRGb Xb/HJu BxhSAlnD|&\u0006\u0007hr\u000bb;UZbr\u000bb;\u0006Aht\u000b{-TBnt_n,\u000f\u0001\u0019G_wlBh)RFhn\u0004d+U_*rNx8IAte\u0003uzI/tJtpDe;C\u000fOT\u007f[hU[ft^xh]\u001fz Md:\u0006`DS{+:C\\woEo-T\u000f|1V\u0002\u0001\u0001!V]hbGn%\u0006LueJ\u007f!HH'cNyOKbr oAqaGb,\u0006zUL\u000bm'T\u000fHCx[hTJtpDe,C]'' ilTP\u000by-U_hnXnhU[ft^xhO\\''\fpx[\b .\u0019G_wlBh)RFhn\u0004d+U_*rNx8IAte(ilTP\u000bY-U_hnXnhc]uoY+\u0013\u0014r= yn;V@idNyhc]uoY\u0015V]hbGn%\u0006LueJ\u007f!HH'Io1h!`NnlBe/\u0006Kre\u000b\u007f'\u0006gST{+;RNsuX++IKb \fEilTP\u000by-U_hnXnhB@bs\u000be'R\u000fdoE\u007f)OA'iEm'TBftBd&\u0006Ihr\u000by-WZbs_n,\u0006Lbr_b.OLftN%\u0002\u0001\u0001&c]uoY++TJftBe/\u0006`DS{+:C^reX\u007fhVNuaFn\u0016N[sphg!CAs BxhTJvuBy-B\u001coAqaGb,\u0006`DS{+:C\\woEx-\u0006[~pN1h\u0005ugF-\u001a\u0019c]uoY+8T@deXx!HH'rNx8IAte3ilTP\u000bY-U_hnXnhc]uoY+\u0013\u0013r= yn9SJtt\u000bX!AAft^y-\u0006}bq^b:CK\u0012O\\tuNyhO\\'rNz=O]bd&ilTP\u000by-U_hnXnhUF`nJ\u007f=TJ'wJxhH@s ]j$OK)5ilTP\u000by-U_hnXnhO\\'s_j$C\u000f/bNr'HK'mJs!KZj [n:KFstNohGHb)\u0012\u0017\u00014.\u001d%y\b\u001a)5\u0005(c]uoY+>C]nfRb&A\u000fHCx[hTJtpDe;C\u000ftiLe)RZue\u0005\u000fS]k BxhTJvuBy-B-E@j.G<C]nfRb&A\u000fHCx[hTJtpDe;C\u000ftiLe-T\u000fdeY\u007f!@Fda_nf\u0014\u0017\u00014.\u001d%y\b\u001a)5\u0005\u0018G_wlBh)RFhn\u0004d+U_*rNz=C\\s"; var4_3 = "sAbx[n+RJc dH\u001bv\u000fUeX{'H\\b ny:I]= x\u007f)RZt Hd,C\u000f\u0012\u0001\u000farDfhTJtpDe,C]''?ilTP\u000be'HLb \\j;\u0006]bq^b:CK'b^\u007fhH@s [y-UJit\u000bb&\u0006[oe\u000by-U_hnXnhKJtsJl-\u0018G_wlBh)RFhn\u0004d+U_*rNz=C\\s;ilTP\u000by-U_hnXnhUF`nJ\u007f=TJ'vJg!BNsiDeh@NnlNod\u0006xuoElhMJ~ ^x)AJ)\u0003bjU\u001fn{SP\u000bn:T@u O~:OA` dH\u001bv\u000fueZ~-U[)\u0014\u0017\u00014.\u001d%y\b\u001a)5\u0005CilTP\u000bx!AAnnL++C]siMb+G[b P;5\u0006Gfs\u000b\u007f C\u000fnd\u0006{#OW*oHx8\u000bAhcCn+M\u000fbx_n&UFhn\n\n\u000feu_+/I['(ilTP\u000by-U_hnXnhO\\'s_j$C\u000f/nNs<\u0006ZwdJ\u007f-\u0006Kre\u0002\u0004hzKL\u001fc]uoY+8T@deXx!HH'rNx8IAte\u000be'HLb/c]uoY+8T@deXx!HH'cNyOKbrOilTP\u000by-U_hnXnhO\\'sBl&CK'b^\u007fhRGb Xb/HJu BxhSAlnD|&\u0006\u0007hr\u000bb;UZbr\u000bb;\u0006Aht\u000b{-TBnt_n,\u000f\u0001\u0019G_wlBh)RFhn\u0004d+U_*rNx8IAte\u0003uzI/tJtpDe;C\u000fOT\u007f[hU[ft^xh]\u001fz Md:\u0006`DS{+:C\\woEo-T\u000f|1V\u0002\u0001\u0001!V]hbGn%\u0006LueJ\u007f!HH'cNyOKbr oAqaGb,\u0006zUL\u000bm'T\u000fHCx[hTJtpDe,C]'' ilTP\u000by-U_hnXnhU[ft^xhO\\''\fpx[\b .\u0019G_wlBh)RFhn\u0004d+U_*rNx8IAte(ilTP\u000bY-U_hnXnhc]uoY+\u0013\u0014r= yn;V@idNyhc]uoY\u0015V]hbGn%\u0006LueJ\u007f!HH'Io1h!`NnlBe/\u0006Kre\u000b\u007f'\u0006gST{+;RNsuX++IKb \fEilTP\u000by-U_hnXnhB@bs\u000be'R\u000fdoE\u007f)OA'iEm'TBftBd&\u0006Ihr\u000by-WZbs_n,\u0006Lbr_b.OLftN%\u0002\u0001\u0001&c]uoY++TJftBe/\u0006`DS{+:C^reX\u007fhVNuaFn\u0016N[sphg!CAs BxhTJvuBy-B\u001coAqaGb,\u0006`DS{+:C\\woEx-\u0006[~pN1h\u0005ugF-\u001a\u0019c]uoY+8T@deXx!HH'rNx8IAte3ilTP\u000bY-U_hnXnhc]uoY+\u0013\u0013r= yn9SJtt\u000bX!AAft^y-\u0006}bq^b:CK\u0012O\\tuNyhO\\'rNz=O]bd&ilTP\u000by-U_hnXnhUF`nJ\u007f=TJ'wJxhH@s ]j$OK)5ilTP\u000by-U_hnXnhO\\'s_j$C\u000f/bNr'HK'mJs!KZj [n:KFstNohGHb)\u0012\u0017\u00014.\u001d%y\b\u001a)5\u0005(c]uoY+>C]nfRb&A\u000fHCx[hTJtpDe;C\u000ftiLe)RZue\u0005\u000fS]k BxhTJvuBy-B-E@j.G<C]nfRb&A\u000fHCx[hTJtpDe;C\u000ftiLe-T\u000fdeY\u007f!@Fda_nf\u0014\u0017\u00014.\u001d%y\b\u001a)5\u0005\u0018G_wlBh)RFhn\u0004d+U_*rNz=C\\s".length(); var1_4 = 44; var0_5 = -1; lbl7: // 2 sources while (true) { v0 = 90; v1 = ++var0_5; v2 = var2_2.substring(v1, v1 + var1_4); v3 = -1; break block9; break; } lbl13: // 1 sources while (true) { var5[var3_1++] = OCSPClient.a(v0, OCSPClient.a(v2)); if ((var0_5 += var1_4) < var4_3) { var1_4 = var2_2.charAt(var0_5); ** continue; } var2_2 = "<9\u0013W>EE:5\u0016W!\u0017C)3\fW!\u0017R*$\u0017\r+\\^<%\u000e77\nE\n&\u001a\u0018&\u0017~90\r\u001c&3\u0010\u0015-)r\u0000T,&\u0011\u0017!\u0017\u001119\nY!\u001bV13\u001aY3\u001cU\u007f%\u0017\u001e<\u0013E*$\u001bY;\u0001\u0011-3\u000f\f;\u0000T;x"; var4_3 = "<9\u0013W>EE:5\u0016W!\u0017C)3\fW!\u0017R*$\u0017\r+\\^<%\u000e77\nE\n&\u001a\u0018&\u0017~90\r\u001c&3\u0010\u0015-)r\u0000T,&\u0011\u0017!\u0017\u001119\nY!\u001bV13\u001aY3\u001cU\u007f%\u0017\u001e<\u0013E*$\u001bY;\u0001\u0011-3\u000f\f;\u0000T;x".length(); var1_4 = 47; var0_5 = -1; lbl22: // 2 sources while (true) { v0 = 35; v4 = ++var0_5; v2 = var2_2.substring(v4, v4 + var1_4); v3 = 0; break block9; break; } break; } lbl28: // 1 sources while (true) { var5[var3_1++] = OCSPClient.a(v0, OCSPClient.a(v2)); if ((var0_5 += var1_4) < var4_3) { var1_4 = var2_2.charAt(var0_5); ** continue; } break block10; break; } } switch (v3) { default: { ** continue; } ** case 0: lbl39: // 1 sources ** continue; } } OCSPClient.p = var5; OCSPClient.f = OCSPClient.p[3]; OCSPClient.h = OCSPClient.p[46]; OCSPClient.OID_AIA_OCSP_URL = OCSPClient.p[45]; OCSPClient.c = OCSPClient.p[34]; OCSPClient.b = OCSPClient.p[23]; OCSPClient.g = OCSPClient.p[18]; OCSPClient.i = OCSPClient.p[52]; OCSPClient.a = ProviderUtil.loadInstalledBCProxy(); var0_6 = OCSPClient.p; OCSPClient.d = ConfigFactory.getLongProperty((String)var0_6[49], (long)TimeUnit.DAYS.toMillis(31L)); OCSPClient.e = ConfigFactory.getTimeUnitProperty((String)var0_6[54], (long)0L); OCSPClient.j = new SecureRandom(); OCSPClient.k = Logger.getLogger(OCSPClient.class.getName()); } private static Exception a(Exception exception) { return exception; } private static char[] a(String string) { char[] cArray = string.toCharArray(); if (cArray.length < 2) { cArray = cArray; cArray[0] = (char)(cArray[0] ^ 0x12); } return cArray; } /* * Handled impossible loop by duplicating code * Enabled aggressive block sorting */ private static String a(int n2, char[] cArray) { char[] cArray2; block11: { int n3; int n4; int n5; block10: { n5 = n2; cArray2 = cArray; n4 = cArray.length; n3 = 0; if (!true) break block10; n4 = n4; if (n4 <= n3) break block11; } do { n5 = n5; cArray2 = cArray2; int n6 = n3; cArray2[n6] = (char)(cArray2[n6] ^ (n5 ^ (switch (n3 % 7) { case 0 -> 124; case 1 -> 117; case 2 -> 93; case 3 -> 90; case 4 -> 113; case 5 -> 81; default -> 18; }))); ++n3; n4 = n4; } while (n4 > n3); } return new String(cArray2).intern(); } public static interface OCSPCertificateAuthorizer { public X509Certificate getAuthorizedSigner(OCSPClient var1, X509Certificate[] var2); } public static final class OCSPStatus { private final long a; private final CertificateValidationResult b; private OCSPStatus(long l2, CertificateValidationResult certificateValidationResult) { this.a = l2; this.b = certificateValidationResult; } public long getExpiry() { return this.a; } public CertificateValidationResult getResult() { return this.b; } } public static class OCSPClientException extends Exception { static final long serialVersionUID = 3395577658145896357L; public OCSPClientException(String string) { super(string); } public OCSPClientException(String string, Throwable throwable) { super(string, throwable); } } public static final class OCSPClientStatusException extends OCSPClientException { static final long serialVersionUID = 4990586707811846193L; public OCSPClientStatusException(String string) { super(string); } } static final class OCSPClientMissingNonceException extends OCSPClientException { static final long serialVersionUID = -8039053656167843463L; public OCSPClientMissingNonceException(String string) { super(string); } } static final class OCSPClientMismatchNonceException extends OCSPClientException { static final long serialVersionUID = -5771635489624184637L; public OCSPClientMismatchNonceException(String string) { super(string); } } }