package com.l7tech.server.identity.ldap;

import com.l7tech.common.io.SingleCertX509KeyManager;
import com.l7tech.gateway.common.security.keystore.SsgKeyEntry;
import com.l7tech.objectmodel.Goid;
import com.l7tech.objectmodel.ObjectModelException;
import com.l7tech.objectmodel.PersistentEntity;
import com.l7tech.server.security.keystore.SsgKeyStoreManager;
import com.l7tech.server.transport.http.SslClientSocketFactory;
import com.l7tech.util.ConfigFactory;
import com.l7tech.util.FilterClassLoader;
import com.l7tech.util.Pair;
import java.security.GeneralSecurityException;
import java.util.Collections;
import java.util.HashMap;
import java.util.Map;
import java.util.logging.Logger;
import javassist.CannotCompileException;
import javassist.ClassClassPath;
import javassist.ClassPool;
import javassist.Loader;
import javassist.NotFoundException;
import javax.naming.NamingException;
import javax.net.ssl.HostnameVerifier;
import javax.net.ssl.KeyManager;
import javax.net.ssl.SSLContext;
import javax.net.ssl.SSLSocketFactory;
import javax.net.ssl.TrustManager;
import javax.net.ssl.X509TrustManager;

public class LdapSslCustomizerSupport {
   private static final Logger a;
   private static final String b;
   private static final int c = 600;
   private static final Map<Pair<Goid, String>, SSLContext> d;
   private static final ClassPool e;
   private static SsgKeyStoreManager f;
   private static X509TrustManager g;
   private static HostnameVerifier h;
   private static ClassLoader i;
   private static final String[] j;

   public static synchronized SSLSocketFactory getSocketFactory(String var0, String var1) throws LdapSslCustomizerSupport.LdapConfigException {
      return a(var0, var1);
   }

   public static synchronized SSLContext getSSLContext(String var0, String var1) throws LdapSslCustomizerSupport.LdapConfigException {
      return b(var0, var1);
   }

   public static synchronized HostnameVerifier getHostnameVerifier() {
      return h;
   }

   public static synchronized void setTrustManager(X509TrustManager var0) {
      g = var0;
   }

   public static synchronized void setSsgKeyStoreManager(SsgKeyStoreManager var0) {
      f = var0;
   }

   public static synchronized void setHostnameVerifier(HostnameVerifier var0) {
      h = var0;
   }

   public static String getSSLSocketFactoryClassname(boolean param0, Goid param1, String param2) {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: iload 0
      // 01: ifeq 31
      // 04: aload 1
      // 05: ifnull 1d
      // 08: goto 0f
      // 0b: invokestatic com/l7tech/server/identity/ldap/LdapSslCustomizerSupport.a (Ljava/lang/RuntimeException;)Ljava/lang/RuntimeException;
      // 0e: athrow
      // 0f: aload 1
      // 10: invokestatic com/l7tech/objectmodel/Goid.isDefault (Lcom/l7tech/objectmodel/Goid;)Z
      // 13: ifeq 31
      // 16: goto 1d
      // 19: invokestatic com/l7tech/server/identity/ldap/LdapSslCustomizerSupport.a (Ljava/lang/RuntimeException;)Ljava/lang/RuntimeException;
      // 1c: athrow
      // 1d: aload 2
      // 1e: ifnonnull 31
      // 21: goto 28
      // 24: invokestatic com/l7tech/server/identity/ldap/LdapSslCustomizerSupport.a (Ljava/lang/RuntimeException;)Ljava/lang/RuntimeException;
      // 27: athrow
      // 28: ldc com/l7tech/server/transport/http/SslClientHostnameAwareSocketFactory
      // 2a: invokevirtual java/lang/Class.getName ()Ljava/lang/String;
      // 2d: astore 3
      // 2e: goto 6e
      // 31: iload 0
      // 32: ifne 50
      // 35: ldc com/l7tech/server/identity/ldap/LdapSSLSocketFactory
      // 37: invokevirtual java/lang/Class.getPackage ()Ljava/lang/Package;
      // 3a: invokevirtual java/lang/Package.getName ()Ljava/lang/String;
      // 3d: getstatic com/l7tech/server/identity/ldap/LdapSslCustomizerSupport.j [Ljava/lang/String;
      // 40: astore 4
      // 42: aload 4
      // 44: bipush 10
      // 46: aaload
      // 47: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001" ]
      // 4c: astore 3
      // 4d: goto 6e
      // 50: ldc com/l7tech/server/identity/ldap/LdapSSLSocketFactory
      // 52: invokevirtual java/lang/Class.getPackage ()Ljava/lang/Package;
      // 55: invokevirtual java/lang/Package.getName ()Ljava/lang/String;
      // 58: aload 1
      // 59: invokestatic java/lang/String.valueOf (Ljava/lang/Object;)Ljava/lang/String;
      // 5c: aload 2
      // 5d: getstatic com/l7tech/server/identity/ldap/LdapSslCustomizerSupport.j [Ljava/lang/String;
      // 60: bipush 7
      // 62: aaload
      // 63: dup_x2
      // 64: pop
      // 65: ldc "_"
      // 67: swap
      // 68: invokedynamic makeConcatWithConstants (Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String; bsm=java/lang/invoke/StringConcatFactory.makeConcatWithConstants (Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; args=[ "\u0001\u0001\u0001\u0001\u0001" ]
      // 6d: astore 3
      // 6e: aload 3
      // 6f: areturn
      // try (0 -> 4): 5 java/lang/IllegalStateException
      // try (2 -> 10): 11 java/lang/IllegalStateException
      // try (7 -> 15): 16 java/lang/IllegalStateException
   }

   public static ClassLoader getSSLSocketFactoryClassLoader() throws NamingException {
      if (i == null) {
         j var0 = new j();
         Loader var1 = new Loader(LdapIdentityProviderImpl.class.getClassLoader(), e);
         var1.delegateLoadingOf(LdapSslCustomizerSupport.class.getName());
         var1.setDomain(LdapSslCustomizerSupport.class.getProtectionDomain());

         try {
            var1.addTranslator(e, var0);
         } catch (NotFoundException var4) {
            String[] var6 = j;
            throw (NamingException)new NamingException(var6[6]).initCause(var4);
         } catch (CannotCompileException var5) {
            String[] var3 = j;
            throw (NamingException)new NamingException(var3[5]).initCause(var5);
         }

         i = new FilterClassLoader(
            LdapIdentityProviderImpl.class.getClassLoader(), var1, Collections.singleton(LdapSSLSocketFactory.class.getPackage().getName() + j[3]), true
         );
      }

      return i;
   }

   private static SSLSocketFactory a(String var0, String var1) throws LdapSslCustomizerSupport.LdapConfigException {
      return b(var0, var1).getSocketFactory();
   }

   private static SSLContext b(String var0, String var1) throws LdapSslCustomizerSupport.LdapConfigException {
      try {
         if (f == null) {
            throw new IllegalStateException(j[8]);
         }
      } catch (IllegalArgumentException var14) {
         throw a(var14);
      }

      try {
         if (g == null) {
            throw new IllegalStateException(j[2]);
         }
      } catch (IllegalArgumentException var9) {
         throw a(var9);
      }

      Pair var2;
      label66: {
         label75: {
            try {
               if (var0 == null && var1 == null) {
                  break label75;
               }
            } catch (IllegalArgumentException var13) {
               throw a(var13);
            }

            Goid var3;
            try {
               var3 = Goid.parseGoid(var0);
            } catch (IllegalArgumentException var8) {
               String[] var7 = j;
               throw new LdapSslCustomizerSupport.LdapConfigException(var7[1] + var0);
            }

            var2 = new Pair(var3, var1);
            break label66;
         }

         var2 = new Pair(PersistentEntity.DEFAULT_GOID, "");
      }

      SSLContext var15 = d.get(var2);
      if (var15 == null) {
         try {
            KeyManager[] var4;
            label52: {
               label51: {
                  try {
                     if (var0 == null && var1 == null) {
                        break label51;
                     }
                  } catch (IllegalArgumentException var10) {
                     throw a(var10);
                  }

                  SsgKeyEntry var5 = f.lookupKeyByKeyAlias(var1, (Goid)var2.left);
                  SingleCertX509KeyManager var6 = new SingleCertX509KeyManager(var5.getCertificateChain(), var5.getPrivateKey());
                  var4 = new KeyManager[]{var6};
                  break label52;
               }

               var4 = null;
            }

            String[] var19 = j;
            SSLContext var16 = SSLContext.getInstance(var19[4]);
            var16.init(var4, new TrustManager[]{g}, null);
            int var17 = ConfigFactory.getIntProperty(b, 600);
            var16.getClientSessionContext().setSessionTimeout(var17);
            var15 = var16;
         } catch (GeneralSecurityException var11) {
            String[] var18 = j;
            throw new LdapSslCustomizerSupport.LdapConfigException(var18[9], var11);
         } catch (ObjectModelException var12) {
            throw new LdapSslCustomizerSupport.LdapConfigException(j[0], var12);
         }

         d.put(var2, var15);
      }

      return var15;
   }

   static {
      String[] var5 = new String[12];
      int var3 = 0;
      String var2 = ",\u001e\u0018%QoX\u001bQ\u0004'\\u\u0016\u000e\u001d\u00043P!3+0=iVm\u0016\n\u001f\u0019ifR3O\u0012\u0002'Ad\u0007\u001b\u0011-\u0010\ti^d\u0006\u001c\u0005\u0002;P!6+KM);\u0003\u0018:AL\u001e\u0001\u0010\n,G!\u0012\u001a\u0002\u0019iWd_\u001c\u0014\u0019iWd\u0019\u0000\u0003\biSh\r\u001c\u0005M<Fd\u001bA\u0016\b'Ps\u001e\u001b\u0014\tgfR3<\u001e\u000e\"Pu9\u000e\u0012\u0019&Gx\u0003;=>\u001c*\u0003\u001f&G!\u0016\u0001Q>\u001ay!\u0016\u0001\u0018\u0019 Tm\u0016\u0015\u0010\u0019 ZoQ\u001c*\u0003\u001f&G!\u0016\u0001Q>\u001ay!\u0016\u0001\u0018\u0019 Tm\u0016\u0015\u0010\u0019 ZoQ\u001cA\u0016\b'Ps\u001e\u001b\u0014\tgfR3<\u001e\u000e\"Pu9\u000e\u0012\u0019&Gx &<\"*i~d\u0006\u001c\u0005\u0002;P!2\u000e\u001f\f.Ps_\u0002\u0004\u001e=\u0015c\u001aO\u0002\b=\u0015g\u0016\u001d\u0002\u0019+,\u001e\u0018%QoX\u001bQ\u0004'\\u\u0016\u000e\u001d\u00043P!3+0=iVm\u0016\n\u001f\u0019ifR3O\u0012\u0002'Ad\u0007\u001b";
      int var4 = ",\u001e\u0018%QoX\u001bQ\u0004'\\u\u0016\u000e\u001d\u00043P!3+0=iVm\u0016\n\u001f\u0019ifR3O\u0012\u0002'Ad\u0007\u001b\u0011-\u0010\ti^d\u0006\u001c\u0005\u0002;P!6+KM);\u0003\u0018:AL\u001e\u0001\u0010\n,G!\u0012\u001a\u0002\u0019iWd_\u001c\u0014\u0019iWd\u0019\u0000\u0003\biSh\r\u001c\u0005M<Fd\u001bA\u0016\b'Ps\u001e\u001b\u0014\tgfR3<\u001e\u000e\"Pu9\u000e\u0012\u0019&Gx\u0003;=>\u001c*\u0003\u001f&G!\u0016\u0001Q>\u001ay!\u0016\u0001\u0018\u0019 Tm\u0016\u0015\u0010\u0019 ZoQ\u001c*\u0003\u001f&G!\u0016\u0001Q>\u001ay!\u0016\u0001\u0018\u0019 Tm\u0016\u0015\u0010\u0019 ZoQ\u001cA\u0016\b'Ps\u001e\u001b\u0014\tgfR3<\u001e\u000e\"Pu9\u000e\u0012\u0019&Gx &<\"*i~d\u0006\u001c\u0005\u0002;P!2\u000e\u001f\f.Ps_\u0002\u0004\u001e=\u0015c\u001aO\u0002\b=\u0015g\u0016\u001d\u0002\u0019+,\u001e\u0018%QoX\u001bQ\u0004'\\u\u0016\u000e\u001d\u00043P!3+0=iVm\u0016\n\u001f\u0019ifR3O\u0012\u0002'Ad\u0007\u001b"
         .length();
      char var1 = '+';
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 122;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     j = var5;
                     a = Logger.getLogger(LdapSslCustomizerSupport.class.getName());
                     b = SslClientSocketFactory.class.getName() + j[11];
                     d = new HashMap<>();
                     e = new ClassPool();
                     e.insertClassPath(new ClassClassPath(LdapSSLSocketFactory.class));
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "&qo@7\u0014y|sn\u0000\u00015T[yiE7\u0012^iu~A \u001f\u0019&eyB\u0001\u0003k{\u007fe@\u0006\u000fumy\u007fZ\u0001\u0003{gxn]";
                  var4 = "&qo@7\u0014y|sn\u0000\u00015T[yiE7\u0012^iu~A \u001f\u0019&eyB\u0001\u0003k{\u007fe@\u0006\u000fumy\u007fZ\u0001\u0003{gxn]".length();
                  var1 = 27;
                  var7 = -1;
            }

            var10000 = 29;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static RuntimeException a(RuntimeException var0) {
      return var0;
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 5);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 21;
            case 1 -> 11;
            case 2 -> 23;
            case 3 -> 51;
            case 4 -> 79;
            case 5 -> 123;
            default -> 5;
         });
      }

      return new String(var10001).intern();
   }

   public static class LdapConfigException extends Exception {
      static final long serialVersionUID = -5755035447970295063L;

      public LdapConfigException(String var1) {
         super(var1);
      }

      public LdapConfigException(String var1, Throwable var2) {
         super(var1, var2);
      }
   }
}