package com.l7tech.server;

import com.l7tech.common.io.WhirlycacheFactory;
import com.l7tech.gateway.common.security.keystore.SsgKeyEntry;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.ObjectNotFoundException;
import com.l7tech.security.cert.TrustedCert;
import com.l7tech.security.cert.TrustedCertManager;
import com.l7tech.security.cert.X509Entity;
import com.l7tech.security.token.KerberosSigningSecurityToken;
import com.l7tech.security.xml.SecurityTokenResolver;
import com.l7tech.security.xml.SignerInfo;
import com.l7tech.security.xml.SimpleSecurityTokenResolver;
import com.l7tech.server.event.EntityClassEvent;
import com.l7tech.server.security.keystore.KeystoreFile;
import com.l7tech.server.security.keystore.SsgKeyFinder;
import com.l7tech.server.security.keystore.SsgKeyStoreManager;
import com.l7tech.server.util.PostStartupApplicationListener;
import com.l7tech.util.Background;
import com.l7tech.util.Config;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.SoapConstants;
import com.whirlycott.cache.Cache;
import java.math.BigInteger;
import java.security.KeyStoreException;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Collection;
import java.util.List;
import java.util.concurrent.atomic.AtomicBoolean;
import java.util.logging.Level;
import java.util.logging.Logger;
import javax.security.auth.x500.X500Principal;
import org.springframework.context.ApplicationEvent;

public class TrustedCertificateResolver implements SecurityTokenResolver, PostStartupApplicationListener {
   private static final Logger a;
   private final TrustedCertManager b;
   private final Cache c;
   private final AtomicBoolean d = new AtomicBoolean();
   private final SsgKeyStoreManager e;
   private volatile SimpleSecurityTokenResolver f;
   private static final String[] g;

   public TrustedCertificateResolver(TrustedCertManager var1, Config var2, SsgKeyStoreManager var3) {
      this.b = var1;
      this.e = var3;
      short var4 = 10181;
      short var5 = 1000;
      String[] var8 = g;
      int var6 = var2.getIntProperty(var8[10], 1000);

      AtomicBoolean var10000;
      boolean var10001;
      label29: {
         try {
            var10000 = this.d;
            if (var6 > 0) {
               var10001 = true;
               break label29;
            }
         } catch (RuntimeException var10) {
            throw a(var10);
         }

         var10001 = false;
      }

      label22: {
         try {
            var10000.set(var10001);
            if (this.d.get()) {
               var12 = var6;
               break label22;
            }
         } catch (RuntimeException var9) {
            throw a(var9);
         }

         var12 = 1000;
      }

      int var7 = var12;
      var8 = g;
      this.c = WhirlycacheFactory.createCache(var8[6], var7, 127, WhirlycacheFactory.POLICY_LRU);
      a.info(var8[7] + var7);
      Background.scheduleRepeated(new b8(this, var2), 10181L, 10181L);
   }

   public X509Certificate lookup(String var1) {
      try {
         SignerInfo var2 = this.lookupPrivateKeyByX509Thumbprint(var1);
         if (var2 != null) {
            return var2.getCertificateChain()[0];
         }

         List var3 = this.b.findByThumbprint(var1);

         try {
            if (var3 != null && var3.size() >= 1) {
               return ((X509Entity)var3.get(0)).getCertificate();
            }
         } catch (FindException var4) {
            throw a(var4);
         }

         return a(this.lookupPrivateKeyByX509Thumbprint(var1));
      } catch (FindException var5) {
         throw new RuntimeException(var5);
      }
   }

   public X509Certificate lookupBySki(String var1) {
      try {
         SignerInfo var2 = this.lookupPrivateKeyBySki(var1);
         if (var2 != null) {
            return var2.getCertificateChain()[0];
         }

         List var3 = this.b.findBySki(var1);

         try {
            if (var3 != null && var3.size() >= 1) {
               return ((X509Entity)var3.get(0)).getCertificate();
            }
         } catch (FindException var4) {
            throw a(var4);
         }

         return a(this.lookupPrivateKeyBySki(var1));
      } catch (FindException var5) {
         throw new RuntimeException(var5);
      }
   }

   public X509Certificate lookupByKeyName(String var1) {
      try {
         Collection var2 = this.b.findBySubjectDn(var1);

         try {
            if (var2 != null && !var2.isEmpty()) {
               return ((TrustedCert)var2.iterator().next()).getCertificate();
            }
         } catch (FindException var4) {
            throw a(var4);
         }

         SignerInfo var3 = this.lookupPrivateKeyByKeyName(var1);
         return var3 != null ? var3.getCertificateChain()[0] : null;
      } catch (FindException var5) {
         throw new RuntimeException(var5);
      }
   }

   public X509Certificate lookupByIssuerAndSerial(X500Principal var1, BigInteger var2) {
      try {
         List var3 = this.b.findByIssuerAndSerial(var1, var2);

         try {
            if (var3 != null && var3.size() >= 1) {
               return ((X509Entity)var3.get(0)).getCertificate();
            }
         } catch (FindException var4) {
            throw a(var4);
         }

         return a(this.lookupPrivateKeyByIssuerAndSerial(var1, var2));
      } catch (FindException var5) {
         throw new RuntimeException(var5);
      }
   }

   private SecurityTokenResolver a() {
      SimpleSecurityTokenResolver var1 = this.f;

      try {
         if (var1 != null) {
            return var1;
         }
      } catch (RuntimeException var2) {
         throw a(var2);
      }

      return this.b();
   }

   private synchronized SecurityTokenResolver b() {
      ArrayList var1 = new ArrayList();

      List var2;
      try {
         var2 = this.e.findAll();
      } catch (FindException var19) {
         String var28 = ExceptionUtils.getMessage(var19);
         String[] var24 = g;
         String var22 = var24[0] + var28;
         throw new RuntimeException(var22, var19);
      } catch (KeyStoreException var20) {
         String var10000 = ExceptionUtils.getMessage(var20);
         String[] var15 = g;
         String var4 = var15[9] + var10000;
         throw new RuntimeException(var4, var20);
      }

      for (SsgKeyFinder var23 : var2) {
         List var5;
         try {
            var5 = var23.getAliases();
         } catch (KeyStoreException var21) {
            Logger var29 = a;
            Level var10001 = Level.WARNING;
            String var10002 = var23.getName();
            String var10003 = ExceptionUtils.getMessage(var21);
            String[] var25 = g;
            var29.log(var10001, var25[5] + var10002 + var25[8] + var10003, var21);
            continue;
         }

         for (String var7 : var5) {
            try {
               SsgKeyEntry var8 = var23.getCertificateChain(var7);

               try {
                  if (var8.isPrivateKeyAvailable()) {
                     var1.add(var8);
                  }
               } catch (FindException var16) {
                  throw a(var16);
               }
            } catch (ObjectNotFoundException var17) {
               Logger var31 = a;
               Level var33 = Level.WARNING;
               String var35 = var23.getName();
               String var9 = ExceptionUtils.getMessage(var17);
               String var10 = var35;
               String var11 = var7;
               String[] var27 = g;
               var31.log(var33, var27[2] + var11 + var27[3] + var10 + var27[11] + var9, ExceptionUtils.getDebugException(var17));
            } catch (KeyStoreException var18) {
               Logger var30 = a;
               Level var32 = Level.WARNING;
               String var34 = var23.getName();
               String var12 = ExceptionUtils.getMessage(var18);
               String var13 = var34;
               String var14 = var7;
               String[] var26 = g;
               var30.log(var32, var26[1] + var14 + var26[4] + var13 + var26[11] + var12, var18);
            }
         }
      }

      return this.f = new SimpleSecurityTokenResolver(null, var1.toArray(new SignerInfo[var1.size()]));
   }

   private static X509Certificate a(SignerInfo var0) {
      try {
         if (var0 == null) {
            return null;
         }
      } catch (RuntimeException var1) {
         throw a(var1);
      }

      return var0.getCertificate();
   }

   public SignerInfo lookupPrivateKeyByCert(X509Certificate var1) {
      return this.a().lookupPrivateKeyByCert(var1);
   }

   public SignerInfo lookupPrivateKeyByX509Thumbprint(String var1) {
      return this.a().lookupPrivateKeyByX509Thumbprint(var1);
   }

   public SignerInfo lookupPrivateKeyBySki(String var1) {
      return this.a().lookupPrivateKeyBySki(var1);
   }

   public SignerInfo lookupPrivateKeyByKeyName(String var1) {
      return this.a().lookupPrivateKeyByKeyName(var1);
   }

   public SignerInfo lookupPrivateKeyByIssuerAndSerial(X500Principal var1, BigInteger var2) {
      return this.a().lookupPrivateKeyByIssuerAndSerial(var1, var2);
   }

   public byte[] getSecretKeyByEncryptedKeySha1(String var1) {
      return this.getSecretKeyByTokenIdentifier(SoapConstants.VALUETYPE_ENCRYPTED_KEY_SHA1, var1);
   }

   public void putSecretKeyByEncryptedKeySha1(String var1, byte[] var2) {
      this.putSecretKeyByTokenIdentifier(SoapConstants.VALUETYPE_ENCRYPTED_KEY_SHA1, var1, var2);
   }

   public byte[] getSecretKeyByTokenIdentifier(String var1, String var2) {
      try {
         if (!this.d.get()) {
            return null;
         }
      } catch (RuntimeException var3) {
         throw a(var3);
      }

      return (byte[])this.c.retrieve(new ba(var1, var2));
   }

   public void putSecretKeyByTokenIdentifier(String var1, String var2, byte[] var3) {
      try {
         if (this.d.get()) {
            this.c.store(new ba(var1, var2), var3);
         }
      } catch (RuntimeException var4) {
         throw a(var4);
      }
   }

   public KerberosSigningSecurityToken getKerberosTokenBySha1(String var1) {
      return null;
   }

   @Override
   public void onApplicationEvent(ApplicationEvent var1) {
      if (var1 instanceof EntityClassEvent var2) {
         try {
            if (KeystoreFile.class.equals(var2.getEntityClass())) {
               this.f = null;
            }
         } catch (RuntimeException var3) {
            throw a(var3);
         }
      }
   }

   static {
      String[] var5 = new String[12];
      int var3 = 0;
      String var2 = "3J+O}\\>\u0012KjLrZ{\u0015WjFt@>\u0015P%_t\u0003>#3J+O}\\>\u0012KjLrZ{\u0015Wj]cPh\u0007P/\rz\\gFE&DpJ>#3J+O}\\>\u0012KjLrZ{\u0015Wj]cPh\u0007P/\rz\\gFE&DpJ>\u000eFM$\rz\\gFW>Bc\\>\u000eFM$\rz\\gFW>Bc\\>\u001b3J+O}\\>\u0012KjLrZ{\u0015WjFt@>\u0015P%_t\u0019\u0013#T\"H|\\l\u0007HjFt@>\u0005E)Et+/J#YxXr\u000f^#Cv\u0019{\u0016L/@tK\u007f\n\u0004!Hh\u0019}\u0007G\"H1Nw\u0012Lj^xC{F\u0002\\\u0004\u001c3J+O}\\>\u0012KjLrZ{\u0015WjFt@>\u0015P%_t\u0003>";
      int var4 = "3J+O}\\>\u0012KjLrZ{\u0015WjFt@>\u0015P%_t\u0003>#3J+O}\\>\u0012KjLrZ{\u0015Wj]cPh\u0007P/\rz\\gFE&DpJ>#3J+O}\\>\u0012KjLrZ{\u0015Wj]cPh\u0007P/\rz\\gFE&DpJ>\u000eFM$\rz\\gFW>Bc\\>\u000eFM$\rz\\gFW>Bc\\>\u001b3J+O}\\>\u0012KjLrZ{\u0015WjFt@>\u0015P%_t\u0019\u0013#T\"H|\\l\u0007HjFt@>\u0005E)Et+/J#YxXr\u000f^#Cv\u0019{\u0016L/@tK\u007f\n\u0004!Hh\u0019}\u0007G\"H1Nw\u0012Lj^xC{F\u0002\\\u0004\u001c3J+O}\\>\u0012KjLrZ{\u0015WjFt@>\u0015P%_t\u0003>"
         .length();
      char var1 = 28;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 4;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     g = var5;
                     a = Logger.getLogger(TrustedCertificateResolver.class.getName());
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "\u0014C5_kK{\u0010_\u0016_\u007fch\tp<YnKL\u001fG/Sc]\u0002K\u0013";
                  var4 = "\u0014C5_kK{\u0010_\u0016_\u007fch\tp<YnKL\u001fG/Sc]\u0002K\u0013".length();
                  var1 = 27;
                  var7 = -1;
            }

            var10000 = 19;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 26);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 98;
            case 1 -> 32;
            case 2 -> 78;
            case 3 -> 41;
            case 4 -> 21;
            case 5 -> 61;
            default -> 26;
         });
      }

      return new String(var10001).intern();
   }
}