package com.l7tech.server.identity.cert;

import com.l7tech.common.io.CertUtils;
import com.l7tech.objectmodel.FindException;
import com.l7tech.objectmodel.Goid;
import com.l7tech.security.cert.CertVerifier;
import com.l7tech.security.cert.TrustedCert;
import com.l7tech.security.cert.TrustedCert.TrustedFor;
import com.l7tech.security.cert.TrustedCertManager.UnknownCertificateException;
import java.security.InvalidKeyException;
import java.security.NoSuchAlgorithmException;
import java.security.NoSuchProviderException;
import java.security.SignatureException;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Collection;
import java.util.Collections;
import java.util.EnumSet;
import java.util.HashSet;
import java.util.Set;
import java.util.logging.Level;
import java.util.logging.Logger;

public class TrustedCertServicesImpl implements TrustedCertServices {
   private static final Logger a;
   private final TrustedCertCache b;
   private static final String[] c;

   public TrustedCertServicesImpl(TrustedCertCache var1) {
      this.b = var1;
   }

   @Override
   public void checkSslTrust(X509Certificate[] var1, Set<Goid> var2) throws CertificateException {
      String var3 = CertUtils.getIssuerDN(var1[0]);

      try {
         if (!this.a(var1, var2)) {
            this.a(var1, var3, var2);
         }
      } catch (Exception var6) {
         Exception var4 = var6;

         try {
            if (var4 instanceof CertificateException) {
               throw (CertificateException)var4;
            }
         } catch (Exception var5) {
            throw a(var5);
         }

         a.log(Level.WARNING, var6.getMessage(), var6);
         throw new CertificateException(var6.getMessage(), var6);
      }
   }

   @Override
   public Collection<TrustedCert> getCertsBySubjectDnFiltered(String param1, boolean param2, Set<TrustedFor> param3, Set<Goid> param4) throws FindException {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aload 0
      // 01: getfield com/l7tech/server/identity/cert/TrustedCertServicesImpl.b Lcom/l7tech/server/identity/cert/TrustedCertCache;
      // 04: aload 1
      // 05: invokeinterface com/l7tech/server/identity/cert/TrustedCertCache.findBySubjectDn (Ljava/lang/String;)Ljava/util/Collection; 2
      // 0a: astore 5
      // 0c: new java/util/ArrayList
      // 0f: dup
      // 10: invokespecial java/util/ArrayList.<init> ()V
      // 13: astore 6
      // 15: aload 5
      // 17: invokeinterface java/util/Collection.iterator ()Ljava/util/Iterator; 1
      // 1c: astore 7
      // 1e: aload 7
      // 20: invokeinterface java/util/Iterator.hasNext ()Z 1
      // 25: ifeq a0
      // 28: aload 7
      // 2a: invokeinterface java/util/Iterator.next ()Ljava/lang/Object; 1
      // 2f: checkcast com/l7tech/security/cert/TrustedCert
      // 32: astore 8
      // 34: iload 2
      // 35: ifeq 51
      // 38: aload 8
      // 3a: invokevirtual com/l7tech/security/cert/TrustedCert.getCertificate ()Ljava/security/cert/X509Certificate;
      // 3d: invokestatic com/l7tech/common/io/CertUtils.isValid (Ljava/security/cert/X509Certificate;)Z
      // 40: ifne 51
      // 43: goto 4a
      // 46: invokestatic com/l7tech/server/identity/cert/TrustedCertServicesImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 49: athrow
      // 4a: goto 1e
      // 4d: invokestatic com/l7tech/server/identity/cert/TrustedCertServicesImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 50: athrow
      // 51: aload 3
      // 52: ifnull 6c
      // 55: aload 8
      // 57: aload 3
      // 58: invokevirtual com/l7tech/security/cert/TrustedCert.isTrustedForAll (Ljava/util/Set;)Z
      // 5b: ifne 6c
      // 5e: goto 65
      // 61: invokestatic com/l7tech/server/identity/cert/TrustedCertServicesImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 64: athrow
      // 65: goto 1e
      // 68: invokestatic com/l7tech/server/identity/cert/TrustedCertServicesImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 6b: athrow
      // 6c: aload 4
      // 6e: ifnull 8e
      // 71: aload 4
      // 73: aload 8
      // 75: invokevirtual com/l7tech/security/cert/TrustedCert.getGoid ()Lcom/l7tech/objectmodel/Goid;
      // 78: invokeinterface java/util/Set.contains (Ljava/lang/Object;)Z 2
      // 7d: ifne 8e
      // 80: goto 87
      // 83: invokestatic com/l7tech/server/identity/cert/TrustedCertServicesImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 86: athrow
      // 87: goto 1e
      // 8a: invokestatic com/l7tech/server/identity/cert/TrustedCertServicesImpl.a (Ljava/lang/Exception;)Ljava/lang/Exception;
      // 8d: athrow
      // 8e: aload 8
      // 90: invokevirtual com/l7tech/security/cert/TrustedCert.setReadOnly ()V
      // 93: aload 6
      // 95: aload 8
      // 97: invokeinterface java/util/List.add (Ljava/lang/Object;)Z 2
      // 9c: pop
      // 9d: goto 1e
      // a0: aload 6
      // a2: areturn
      // try (19 -> 25): 26 com/l7tech/objectmodel/FindException
      // try (21 -> 29): 29 com/l7tech/objectmodel/FindException
      // try (31 -> 37): 38 com/l7tech/objectmodel/FindException
      // try (33 -> 41): 41 com/l7tech/objectmodel/FindException
      // try (43 -> 50): 51 com/l7tech/objectmodel/FindException
      // try (45 -> 54): 54 com/l7tech/objectmodel/FindException
   }

   @Override
   public Collection<TrustedCert> getAllCertsByTrustFlags(Set<TrustedFor> var1) throws FindException {
      HashSet var2 = new HashSet();

      for (TrustedFor var4 : var1) {
         var2.addAll(this.b.findByTrustFlag(var4));
      }

      return Collections.unmodifiableCollection(var2);
   }

   private void a(X509Certificate[] var1, String var2, Set<Goid> var3) throws FindException, CertificateException, NoSuchProviderException, NoSuchAlgorithmException, SignatureException, InvalidKeyException {
      Collection var4 = this.getCertsBySubjectDnFiltered(var2, true, EnumSet.of(TrustedFor.SIGNING_SERVER_CERTS), var3);
      if (var4.isEmpty()) {
         String var11 = CertUtils.getSubjectDN(var1[0]);

         try {
            if (this.b.findBySubjectDn(var11).isEmpty()) {
               throw new UnknownCertificateException(c[4] + var2 + "'");
            }
         } catch (FindException var10) {
            throw a(var10);
         }

         String[] var12 = c;
         throw new CertificateException(var12[5] + var11 + var12[2]);
      } else {
         for (TrustedCert var6 : var4) {
            X509Certificate var7 = var6.getCertificate();

            try {
               if (CertVerifier.isVerified(var1[0], var7)) {
                  return;
               }
            } catch (FindException var9) {
               throw a(var9);
            }
         }

         String[] var8 = c;
         throw new CertificateException(var8[1] + var2 + var8[6]);
      }
   }

   private boolean a(X509Certificate[] var1, Set<Goid> var2) throws CertificateException {
      try {
         String var3 = CertUtils.getSubjectDN(var1[0]);

         for (TrustedCert var6 : this.getCertsBySubjectDnFiltered(var3, true, EnumSet.of(TrustedFor.SSL), var2)) {
            X509Certificate var7 = var6.getCertificate();

            try {
               if (!CertUtils.certsAreEqual(var7, var1[0]) || !CertUtils.isValid(var7)) {
                  continue;
               }
            } catch (FindException var9) {
               throw a(var9);
            }

            return true;
         }

         String[] var8 = c;
         a.fine(var8[0] + var3 + var8[3]);
         return false;
      } catch (FindException var10) {
         a.log(Level.WARNING, var10.getMessage(), var10);
         throw new CertificateException(var10.getMessage());
      }
   }

   static {
      String[] var5 = new String[7];
      int var3 = 0;
      String var2 = "Rhi\u001e\u001a\u000e\u0006bhi\u001c_[\u0014BL;+\u001a\u000eR)~2H\b\u0015Ri-_&_[ &-}\u0007\n\u0012B!on\u001c_\u0012Iu-o\u001a\n\u000fRdi;\u000e\u0010\u000e\u0006R^WF?&-}\u0007\n\u0012B!on\u001c_\u0012Iu-o\u001a\n\u000fRdi;\u000e\u0010\u000e\u0006R^WF_+Oma;\u000b\u0017\u0019Ej-r\u001b\f\tCs-x\r\r\b\n!d}H\u001e\u0012_\u001fBbn\u0004\u001b\u0012\u0001u-}\u0001\u0011\u0018\u0006BL;\u000b\u001a\u000eR!zr\u001c\u0017\\bO-<";
      int var4 = "Rhi\u001e\u001a\u000e\u0006bhi\u001c_[\u0014BL;+\u001a\u000eR)~2H\b\u0015Ri-_&_[ &-}\u0007\n\u0012B!on\u001c_\u0012Iu-o\u001a\n\u000fRdi;\u000e\u0010\u000e\u0006R^WF?&-}\u0007\n\u0012B!on\u001c_\u0012Iu-o\u001a\n\u000fRdi;\u000e\u0010\u000e\u0006R^WF_+Oma;\u000b\u0017\u0019Ej-r\u001b\f\tCs-x\r\r\b\n!d}H\u001e\u0012_\u001fBbn\u0004\u001b\u0012\u0001u-}\u0001\u0011\u0018\u0006BL;\u000b\u001a\u000eR!zr\u001c\u0017\\bO-<"
         .length();
      char var1 = '\r';
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 114;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     c = var5;
                     a = Logger.getLogger(TrustedCertServicesImpl.class.getName());
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "'\u001d\u001cko{s\u0017\u001d\u001ci*.4SX\br\u007fg7T\u001a\u001bi*g<\u0000X\u001ao\u007fz'\u0011\u001cN{e{s\u0007\u0011\tscg4T+=Q*Z6\u0006\u000e\u000bo*J6\u0006\f\u001d";
                  var4 = "'\u001d\u001cko{s\u0017\u001d\u001ci*.4SX\br\u007fg7T\u001a\u001bi*g<\u0000X\u001ao\u007fz'\u0011\u001cN{e{s\u0007\u0011\tscg4T+=Q*Z6\u0006\u000e\u000bo*J6\u0006\f\u001d"
                     .length();
                  var1 = '\r';
                  var7 = -1;
            }

            var10000 = 7;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 84);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 115;
            case 1 -> 127;
            case 2 -> 105;
            case 3 -> 26;
            case 4 -> 13;
            case 5 -> 14;
            default -> 84;
         });
      }

      return new String(var10001).intern();
   }
}