package com.l7tech.server.security.cert;

import com.l7tech.common.http.GenericHttpClientFactory;
import com.l7tech.common.io.CertUtils;
import com.l7tech.common.io.WhirlycacheFactory;
import com.l7tech.gateway.common.audit.Audit;
import com.l7tech.gateway.common.audit.SystemMessages;
import com.l7tech.gateway.common.audit.Messages.M;
import com.l7tech.util.Config;
import com.l7tech.util.TimeUnit;
import com.whirlycott.cache.Cache;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
import java.util.Date;
import java.util.Set;
import org.jetbrains.annotations.Nullable;

public class OCSPCache {
   private static final int a;
   private static final ThreadLocal<Set<m>> b;
   private static final String c;
   private static final String d;
   private static final String e;
   static final String f;
   private final Cache g;
   private final GenericHttpClientFactory h;
   private final Config i;
   private static final String[] j;

   public OCSPCache(GenericHttpClientFactory var1, Config var2) {
      if (var1 == null) {
         String[] var3 = j;
         throw new IllegalArgumentException(var3[6]);
      }

      try {
         if (var2 == null) {
            throw new IllegalArgumentException(j[2]);
         }
      } catch (IllegalArgumentException var4) {
         throw a(var4);
      }

      this.h = var1;
      this.i = var2;
      this.g = WhirlycacheFactory.createCache(j[3], 1000, 57, WhirlycacheFactory.POLICY_LRU);
   }

   public OCSPClient.OCSPStatus getOCSPStatus(
      String var1, X509Certificate var2, X509Certificate var3, OCSPClient.OCSPCertificateAuthorizer var4, @Nullable Boolean var5, Audit var6
   ) throws OCSPClient.OCSPClientException {
      m var7 = this.a(var1, var2, this.a(var5));
      Set var8 = b.get();

      try {
         if (var8.contains(var7)) {
            throw new OCSPCache.OCSPClientRecursionException(j[4] + var2.getSubjectDN() + j[14]);
         }
      } catch (OCSPClient.OCSPClientException var26) {
         throw a(var26);
      }

      var8.add(var7);

      try {
         OCSPClient.OCSPStatus var10 = null;
         n var11 = (n)this.g.retrieve(var7);
         if (var11 != null) {
            var10 = var11.a;
         }

         label105: {
            try {
               if (var11 != null && !var11.a()) {
                  break label105;
               }
            } catch (OCSPClient.OCSPClientException var24) {
               throw a(var24);
            }

            M var10001 = SystemMessages.CERTVAL_REV_CACHE_MISS;
            String[] var10002 = new String[2];
            String[] var18 = j;
            var10002[0] = var18[15];
            var10002[1] = var2.getSubjectDN().toString();
            var6.logAndAudit(var10001, var10002);
            OCSPClient var12 = new OCSPClient(this.h.createHttpClient(), var1, var3, var4);

            OCSPClient.OCSPStatus var27;
            try {
               var27 = var12.getRevocationStatus(var2, this.a(var5), true);
            } catch (OCSPClient.OCSPClientException var23) {
               if (var10 != null) {
                  var27 = var10;
                  var6.logAndAudit(
                     SystemMessages.CERTVAL_REV_USE_CACHE, new String[]{j[15], var2.getSubjectDN().toString(), new Date(var27.getExpiry()).toString()}
                  );
                  this.g.store(var7, new n(var10, var27.getExpiry()), var27.getExpiry());
                  return var27;
               }

               throw var23;
            }

            long var13 = System.currentTimeMillis();
            long var15 = this.a(var27.getExpiry(), var13);
            this.g.store(var7, new n(var27, var13 + var15), var15);
            return var27;
         }

         OCSPClient.OCSPStatus var31 = var11.a;
         M var29 = SystemMessages.CERTVAL_REV_CACHE_HIT;
         String[] var30 = new String[2];
         String[] var28 = j;
         var30[0] = var28[1];
         var30[1] = var2.getSubjectDN().toString();
         var6.logAndAudit(var29, var30);
         return var31;
      } finally {
         var8.remove(var7);
      }
   }

   private long a(long var1, long var3) {
      long var5;
      if (var1 <= 0L) {
         var5 = this.a();
      } else {
         long var7 = var1 - var3;
         if (var7 > this.c()) {
            var5 = this.c();
         } else if (var7 < this.b()) {
            var5 = this.b();
         } else {
            var5 = var7;
         }
      }

      return var5;
   }

   private long a() {
      return this.a(j[0]);
   }

   private long b() {
      return this.a(j[12]);
   }

   private long c() {
      return this.a(j[5]);
   }

   boolean a(@Nullable Boolean var1) {
      try {
         if (var1 != null) {
            return var1;
         }
      } catch (IllegalArgumentException var2) {
         throw a(var2);
      }

      return this.i.getBooleanProperty(j[7], true);
   }

   private long a(String var1) {
      return this.i.getTimeUnitProperty(var1, a);
   }

   private m a(String var1, X509Certificate var2, boolean var3) throws OCSPClient.OCSPClientException {
      try {
         return new m(var1, var2, var3);
      } catch (CertificateException var5) {
         throw new OCSPClient.OCSPClientException(j[8] + CertUtils.getCertIdentifyingInformation(var2) + "]", var5);
      }
   }

   static {
      String[] var5 = new String[16];
      int var3 = 0;
      String var2 = "n.3BmT\bNk?BR~)g\u0004Q\u0006\tj\u001dm (LGe\u0018q+<SE76k6.\u001aLx/>'?\u001aLb7r\u0011Q\u0006\tjpr(n*4IGT:}-?(L 9OPd2h zUP78w79ONv)>\n\u0019ir7){4/_Qc{x*(\u001a\u0005\u0015n.3BmT\bNk7[ZR#n,(Ccp>\"v1.Ja{2{+.|Ct/q7#\u001aOb(je4UV79{e4ON{\u0011n.3BmT\bNk/IGY4p&?\u001e[7(UP7+l*9_Qd2p\"zYGe/w#3YCc>>\u001e\u0015n.3BmT\bNk7[ZR#n,(Ccp>\u000fn.3BmT\bNk?BR~)g\u0011n.3BmT\bNk/IGY4p&?\u0015n.3BmT\bNk7SLR#n,(Ccp>\u0015n.3BmT\bNk7SLR#n,(Ccp>";
      int var4 = "n.3BmT\bNk?BR~)g\u0004Q\u0006\tj\u001dm (LGe\u0018q+<SE76k6.\u001aLx/>'?\u001aLb7r\u0011Q\u0006\tjpr(n*4IGT:}-?(L 9OPd2h zUP78w79ONv)>\n\u0019ir7){4/_Qc{x*(\u001a\u0005\u0015n.3BmT\bNk7[ZR#n,(Ccp>\"v1.Ja{2{+.|Ct/q7#\u001aOb(je4UV79{e4ON{\u0011n.3BmT\bNk/IGY4p&?\u001e[7(UP7+l*9_Qd2p\"zYGe/w#3YCc>>\u001e\u0015n.3BmT\bNk7[ZR#n,(Ccp>\u000fn.3BmT\bNk?BR~)g\u0011n.3BmT\bNk/IGY4p&?\u0015n.3BmT\bNk7SLR#n,(Ccp>\u0015n.3BmT\bNk7SLR#n,(Ccp>"
         .length();
      char var1 = 15;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 119;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, b(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     j = var5;
                     String[] var9 = j;
                     c = j[10];
                     d = var9[13];
                     e = var9[9];
                     f = var9[11];
                     a = TimeUnit.MINUTES.getMultiplier();
                     b = new aa();
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "[\t\u00043dk\b";
                  var4 = "[\t\u00043dk\b".length();
                  var1 = 2;
                  var7 = -1;
            }

            var10000 = 21;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   private static char[] b(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 44);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 105;
            case 1 -> 50;
            case 2 -> 45;
            case 3 -> 77;
            case 4 -> 85;
            case 5 -> 96;
            default -> 44;
         });
      }

      return new String(var10001).intern();
   }

   public static final class OCSPClientRecursionException extends OCSPClient.OCSPClientException {
      static final long serialVersionUID = 1538036374249979818L;

      public OCSPClientRecursionException(String var1) {
         super(var1);
      }

      public OCSPClientRecursionException(String var1, Throwable var2) {
         super(var1, var2);
      }
   }
}