package com.l7tech.security.cert;

import com.l7tech.objectmodel.Goid;
import com.l7tech.objectmodel.NameableEntity;
import com.l7tech.objectmodel.SecurityZone;
import com.l7tech.objectmodel.ZoneableEntity;
import com.l7tech.objectmodel.migration.Migration;
import com.l7tech.search.Dependency;
import com.l7tech.security.rbac.RbacAttribute;
import com.l7tech.util.DeserializeSafe;
import com.l7tech.util.Functions.Unary;
import jakarta.persistence.Column;
import jakarta.persistence.Entity;
import jakarta.persistence.EnumType;
import jakarta.persistence.Enumerated;
import jakarta.persistence.JoinColumn;
import jakarta.persistence.ManyToOne;
import jakarta.persistence.Table;
import jakarta.persistence.Transient;
import jakarta.persistence.Version;
import jakarta.xml.bind.annotation.XmlRootElement;
import jakarta.xml.bind.annotation.XmlTransient;
import java.security.cert.CertificateException;
import java.util.Date;
import java.util.EnumSet;
import java.util.Set;
import javax.validation.constraints.NotNull;
import javax.validation.constraints.Size;
import org.hibernate.annotations.Proxy;
import org.hibernate.annotations.Type;
import org.jetbrains.annotations.Nullable;

@XmlRootElement
@Entity
@Proxy(lazy = false)
@Table(name = "trusted_cert")
@DeserializeSafe
public class TrustedCert extends X509Entity implements NameableEntity, Cloneable, ZoneableEntity {
   private String name;
   private final Set<TrustedCert.TrustedFor> trustedFor = EnumSet.noneOf(TrustedCert.TrustedFor.class);
   private boolean verifyHostname;
   private boolean trustAnchor;
   private TrustedCert.PolicyUsageType revocationCheckPolicyType;
   private Goid revocationCheckPolicyOid;
   private SecurityZone securityZone;
   static final long serialVersionUID = -8887526647589952706L;
   private static final String[] c;

   public void copyFrom(TrustedCert var1) {
      this.mutate();
      super.copyFrom(var1);
      this.name = var1.name;
      this.trustedFor.clear();
      this.trustedFor.addAll(var1.trustedFor);
      this.verifyHostname = var1.verifyHostname;
      this.trustAnchor = var1.trustAnchor;
      this.revocationCheckPolicyType = var1.revocationCheckPolicyType;
      this.revocationCheckPolicyOid = var1.revocationCheckPolicyOid;
      this.setSecurityZone(var1.getSecurityZone());
   }

   @RbacAttribute
   @NotNull
   @Size(min = 1, max = 128)
   @Column(name = "name", nullable = false, length = 128)
   @Override
   public String getName() {
      return this.name;
   }

   @Override
   public void setName(String var1) {
      this.mutate();
      this.name = var1;
   }

   @Transient
   public String getUsageDescription() {
      StringBuffer var1 = new StringBuffer();

      label51: {
         try {
            if (EnumSet.allOf(TrustedCert.TrustedFor.class).equals(this.trustedFor)) {
               var1.append(c[1]);
               break label51;
            }
         } catch (NullPointerException var8) {
            throw a(var8);
         }

         for (TrustedCert.TrustedFor var5 : TrustedCert.TrustedFor.values()) {
            try {
               if (this.trustedFor.contains(var5)) {
                  this.add(var1, var5.getUsageDescription());
               }
            } catch (NullPointerException var7) {
               throw a(var7);
            }
         }
      }

      try {
         if (var1.length() < 1) {
            var1.append(c[2]);
         }
      } catch (NullPointerException var6) {
         throw a(var6);
      }

      return var1.toString();
   }

   private void add(StringBuffer var1, String var2) {
      try {
         if (var1.length() == 0) {
            var1.append(var2);
            return;
         }
      } catch (NullPointerException var3) {
         throw a(var3);
      }

      var1.append(c[0]);
      var1.append(var2);
   }

   @Override
   public Object clone() throws CloneNotSupportedException {
      return super.clone();
   }

   @RbacAttribute
   @Column(name = "trusted_for_ssl")
   public boolean isTrustedForSsl() {
      return this.isTrustedFor(TrustedCert.TrustedFor.SSL);
   }

   public void setTrustedForSsl(boolean var1) {
      this.setTrustedFor(TrustedCert.TrustedFor.SSL, var1);
   }

   @RbacAttribute
   @Column(name = "trusted_for_client")
   public boolean isTrustedForSigningClientCerts() {
      return this.isTrustedFor(TrustedCert.TrustedFor.SIGNING_CLIENT_CERTS);
   }

   public void setTrustedForSigningClientCerts(boolean var1) {
      this.setTrustedFor(TrustedCert.TrustedFor.SIGNING_CLIENT_CERTS, var1);
   }

   @RbacAttribute
   @Column(name = "trusted_for_server")
   public boolean isTrustedForSigningServerCerts() {
      return this.isTrustedFor(TrustedCert.TrustedFor.SIGNING_SERVER_CERTS);
   }

   public void setTrustedForSigningServerCerts(boolean var1) {
      this.setTrustedFor(TrustedCert.TrustedFor.SIGNING_SERVER_CERTS, var1);
   }

   @RbacAttribute
   @Column(name = "trusted_for_saml")
   public boolean isTrustedAsSamlIssuer() {
      return this.isTrustedFor(TrustedCert.TrustedFor.SAML_ISSUER);
   }

   public void setTrustedAsSamlIssuer(boolean var1) {
      this.setTrustedFor(TrustedCert.TrustedFor.SAML_ISSUER, var1);
   }

   @RbacAttribute
   @Column(name = "trusted_as_saml_attesting_entity")
   public boolean isTrustedAsSamlAttestingEntity() {
      return this.isTrustedFor(TrustedCert.TrustedFor.SAML_ATTESTING_ENTITY);
   }

   public void setTrustedAsSamlAttestingEntity(boolean var1) {
      this.setTrustedFor(TrustedCert.TrustedFor.SAML_ATTESTING_ENTITY, var1);
   }

   @Column(name = "verify_hostname")
   public boolean isVerifyHostname() {
      return this.verifyHostname;
   }

   public void setVerifyHostname(boolean var1) {
      this.mutate();
      this.verifyHostname = var1;
   }

   @RbacAttribute
   @Column(name = "trust_anchor")
   public boolean isTrustAnchor() {
      return this.trustAnchor;
   }

   public void setTrustAnchor(boolean var1) {
      this.mutate();
      this.trustAnchor = var1;
   }

   @NotNull
   @Column(name = "revocation_type", nullable = false, length = 128)
   @Enumerated(EnumType.STRING)
   public TrustedCert.PolicyUsageType getRevocationCheckPolicyType() {
      return this.revocationCheckPolicyType;
   }

   public void setRevocationCheckPolicyType(TrustedCert.PolicyUsageType var1) {
      this.mutate();
      this.revocationCheckPolicyType = var1;
   }

   @Column(name = "revocation_check_policy_goid")
   @Type(type = "com.l7tech.server.util.GoidType")
   @Dependency(methodReturnType = Dependency.MethodReturnType.GOID, type = Dependency.DependencyType.REVOCATION_CHECK_POLICY)
   public Goid getRevocationCheckPolicyOid() {
      return this.revocationCheckPolicyOid;
   }

   public void setRevocationCheckPolicyOid(Goid var1) {
      this.mutate();
      this.revocationCheckPolicyOid = var1;
   }

   @Transient
   public boolean isExpiredCert() throws CertificateException {
      Date var1 = this.getCertificate().getNotAfter();
      Date var2 = new Date(System.currentTimeMillis());
      return var1.before(var2);
   }

   public boolean isTrustedFor(TrustedCert.TrustedFor var1) {
      return this.trustedFor.contains(var1);
   }

   public boolean isTrustedForAll(Set<TrustedCert.TrustedFor> var1) {
      return this.trustedFor.containsAll(var1);
   }

   public void setTrustedFor(TrustedCert.TrustedFor var1, boolean var2) {
      try {
         this.mutate();
         if (var1 == null) {
            throw new NullPointerException();
         }
      } catch (NullPointerException var3) {
         throw a(var3);
      }

      try {
         if (var2) {
            this.trustedFor.add(var1);
            return;
         }
      } catch (NullPointerException var4) {
         throw a(var4);
      }

      this.trustedFor.remove(var1);
   }

   @Version
   @Column(name = "version")
   @Override
   public int getVersion() {
      return super.getVersion();
   }

   @ManyToOne
   @JoinColumn(name = "security_zone_goid")
   @XmlTransient
   @Migration(dependency = false)
   @Nullable
   @Override
   public SecurityZone getSecurityZone() {
      return this.securityZone;
   }

   @Override
   public void setSecurityZone(@Nullable SecurityZone var1) {
      this.securityZone = var1;
   }

   @Override
   public boolean equals(Object param1) {
      // $VF: Couldn't be decompiled
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      // java.lang.RuntimeException: parsing failure!
      //   at org.jetbrains.java.decompiler.modules.decompiler.decompose.DomHelper.parseGraph(DomHelper.java:211)
      //   at org.jetbrains.java.decompiler.main.rels.MethodProcessor.codeToJava(MethodProcessor.java:174)
      //
      // Bytecode:
      // 00: aload 0
      // 01: aload 1
      // 02: if_acmpne 0b
      // 05: bipush 1
      // 06: ireturn
      // 07: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 0a: athrow
      // 0b: aload 1
      // 0c: instanceof com/l7tech/security/cert/TrustedCert
      // 0f: ifne 18
      // 12: bipush 0
      // 13: ireturn
      // 14: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 17: athrow
      // 18: aload 0
      // 19: aload 1
      // 1a: invokespecial com/l7tech/security/cert/X509Entity.equals (Ljava/lang/Object;)Z
      // 1d: ifne 26
      // 20: bipush 0
      // 21: ireturn
      // 22: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 25: athrow
      // 26: aload 1
      // 27: checkcast com/l7tech/security/cert/TrustedCert
      // 2a: astore 2
      // 2b: aload 0
      // 2c: getfield com/l7tech/security/cert/TrustedCert.trustAnchor Z
      // 2f: aload 2
      // 30: getfield com/l7tech/security/cert/TrustedCert.trustAnchor Z
      // 33: if_icmpeq 3c
      // 36: bipush 0
      // 37: ireturn
      // 38: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 3b: athrow
      // 3c: aload 0
      // 3d: getfield com/l7tech/security/cert/TrustedCert.verifyHostname Z
      // 40: aload 2
      // 41: getfield com/l7tech/security/cert/TrustedCert.verifyHostname Z
      // 44: if_icmpeq 4d
      // 47: bipush 0
      // 48: ireturn
      // 49: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 4c: athrow
      // 4d: aload 0
      // 4e: getfield com/l7tech/security/cert/TrustedCert.trustedFor Ljava/util/Set;
      // 51: ifnull 72
      // 54: aload 0
      // 55: getfield com/l7tech/security/cert/TrustedCert.trustedFor Ljava/util/Set;
      // 58: aload 2
      // 59: getfield com/l7tech/security/cert/TrustedCert.trustedFor Ljava/util/Set;
      // 5c: invokeinterface java/util/Set.equals (Ljava/lang/Object;)Z 2
      // 61: ifne 7f
      // 64: goto 6b
      // 67: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 6a: athrow
      // 6b: goto 79
      // 6e: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 71: athrow
      // 72: aload 2
      // 73: getfield com/l7tech/security/cert/TrustedCert.trustedFor Ljava/util/Set;
      // 76: ifnull 7f
      // 79: bipush 0
      // 7a: ireturn
      // 7b: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 7e: athrow
      // 7f: aload 0
      // 80: getfield com/l7tech/security/cert/TrustedCert.securityZone Lcom/l7tech/objectmodel/SecurityZone;
      // 83: ifnull a2
      // 86: aload 0
      // 87: getfield com/l7tech/security/cert/TrustedCert.securityZone Lcom/l7tech/objectmodel/SecurityZone;
      // 8a: aload 2
      // 8b: getfield com/l7tech/security/cert/TrustedCert.securityZone Lcom/l7tech/objectmodel/SecurityZone;
      // 8e: invokevirtual com/l7tech/objectmodel/SecurityZone.equals (Ljava/lang/Object;)Z
      // 91: ifne af
      // 94: goto 9b
      // 97: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // 9a: athrow
      // 9b: goto a9
      // 9e: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // a1: athrow
      // a2: aload 2
      // a3: getfield com/l7tech/security/cert/TrustedCert.securityZone Lcom/l7tech/objectmodel/SecurityZone;
      // a6: ifnull af
      // a9: bipush 0
      // aa: ireturn
      // ab: invokestatic com/l7tech/security/cert/TrustedCert.a (Ljava/lang/NullPointerException;)Ljava/lang/NullPointerException;
      // ae: athrow
      // af: bipush 1
      // b0: ireturn
      // try (0 -> 5): 5 java/lang/NullPointerException
      // try (7 -> 12): 12 java/lang/NullPointerException
      // try (14 -> 20): 20 java/lang/NullPointerException
      // try (25 -> 32): 32 java/lang/NullPointerException
      // try (34 -> 41): 41 java/lang/NullPointerException
      // try (43 -> 52): 53 java/lang/NullPointerException
      // try (46 -> 56): 56 java/lang/NullPointerException
      // try (58 -> 63): 63 java/lang/NullPointerException
      // try (65 -> 74): 75 java/lang/NullPointerException
      // try (68 -> 78): 78 java/lang/NullPointerException
      // try (80 -> 85): 85 java/lang/NullPointerException
   }

   @Override
   public int hashCode() {
      int var1 = super.hashCode();

      int var10000;
      int var10001;
      label59: {
         try {
            var10000 = 31 * var1;
            if (this.trustedFor != null) {
               var10001 = this.trustedFor.hashCode();
               break label59;
            }
         } catch (NullPointerException var5) {
            throw a(var5);
         }

         var10001 = 0;
      }

      var1 = var10000 + var10001;

      label51: {
         try {
            var10000 = 31 * var1;
            if (this.verifyHostname) {
               var12 = 1;
               break label51;
            }
         } catch (NullPointerException var4) {
            throw a(var4);
         }

         var12 = 0;
      }

      var1 = var10000 + var12;

      label43: {
         try {
            var10000 = 31 * var1;
            if (this.trustAnchor) {
               var13 = 1;
               break label43;
            }
         } catch (NullPointerException var3) {
            throw a(var3);
         }

         var13 = 0;
      }

      var1 = var10000 + var13;

      try {
         var10000 = 31 * var1;
         if (this.securityZone != null) {
            return var10000 + this.securityZone.hashCode();
         }
      } catch (NullPointerException var2) {
         throw a(var2);
      }

      return var10000 + 0;
   }

   private static NullPointerException a(NullPointerException var0) {
      return var0;
   }

   static {
      String[] var5 = new String[3];
      int var3 = 0;
      String var2 = "VH\u0003;\u0004\u0003\u00044\u0007\u0001\u0018";
      int var4 = "VH\u0003;\u0004\u0003\u00044\u0007\u0001\u0018".length();
      char var1 = 2;
      int var0 = -1;

      while (true) {
         String var10002 = c(115, c(var2.substring(++var0, var0 + var1)));
         byte var10001 = -1;
         var5[var3++] = var10002;
         if ((var0 += var1) >= var4) {
            c = var5;
            return;
         }

         var1 = var2.charAt(var0);
      }
   }

   private static char[] c(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 42);
      }

      return var10000;
   }

   private static String c(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 9;
            case 1 -> 27;
            case 2 -> 28;
            case 3 -> 14;
            case 4 -> 67;
            case 5 -> 98;
            default -> 42;
         });
      }

      return new String(var10001).intern();
   }

   public enum PolicyUsageType {
      NONE,
      USE_DEFAULT,
      SPECIFIED;

      // $VF: Failed to inline enum fields
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      static {
         String[] var0 = new String[3];
         int var4 = 0;
         String var3 = "6<uO\u00158H (\u000b0?uS\u0018;G$9|X\u0004+#~I";
         int var5 = "6<uO\u00158H (\u000b0?uS\u0018;G$9|X\u0004+#~I".length();
         char var2 = '\t';
         int var1 = -1;

         while (true) {
            String var10002 = a(119, a(var3.substring(++var1, var1 + var2)));
            byte var10001 = -1;
            var0[var4++] = var10002;
            if ((var1 += var2) >= var5) {
               NONE = new TrustedCert.PolicyUsageType();
               USE_DEFAULT = new TrustedCert.PolicyUsageType();
               SPECIFIED = new TrustedCert.PolicyUsageType();
               return;
            }

            var2 = var3.charAt(var1);
         }
      }

      private static char[] a(String var0) {
         char[] var10000 = var0.toCharArray();
         if (var10000.length < 2) {
            var10000[0] = (char)(var10000[0] ^ 118);
         }

         return var10000;
      }

      private static String a(int var0, char[] var1) {
         int var10003 = var1.length;
         int var10002 = var0;
         char[] var10001 = var1;
         int var10000 = var10003;

         for (int var2 = 0; var10000 > var2; var2++) {
            var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
               case 0 -> 18;
               case 1 -> 27;
               case 2 -> 71;
               case 3 -> 123;
               case 4 -> 43;
               case 5 -> 9;
               default -> 118;
            });
         }

         return new String(var10001).intern();
      }
   }

   public enum TrustedFor {
      SSL,
      SIGNING_SERVER_CERTS,
      SIGNING_CLIENT_CERTS,
      SAML_ISSUER,
      SAML_ATTESTING_ENTITY;

      private final String usageDescription;

      TrustedFor(String var3) {
         this.usageDescription = var3;
      }

      public String getUsageDescription() {
         return this.usageDescription;
      }

      public static Unary<Boolean, TrustedCert> predicate(TrustedCert.TrustedFor var0) {
         return new b(var0);
      }

      // $VF: Failed to inline enum fields
      // Please report this to the Vineflower issue tracker, at https://github.com/Vineflower/vineflower/issues with a copy of the class file (if you have the rights to distribute it!)
      static {
         String[] var0 = new String[10];
         int var4 = 0;
         String var3 = "\bhr/MV`\u000fll7[Ys\u0004lq7[Cm\t\b@X\r2Du\u0016e\u000b\bhr/M^g\b|z1\u0003\bzs\u000b\b@X\r2TX2LQ\u0017\u000b\b@X\r2DQ)_Z\u0011\u0014\b`x-[Ys\u0004zz1DRf\u0004jz1FD\u0015\bhr/2V@/LL\u0017{yS{lQ\u0017{cM";
         int var5 = "\bhr/MV`\u000fll7[Ys\u0004lq7[Cm\t\b@X\r2Du\u0016e\u000b\bhr/M^g\b|z1\u0003\bzs\u000b\b@X\r2TX2LQ\u0017\u000b\b@X\r2DQ)_Z\u0011\u0014\b`x-[Ys\u0004zz1DRf\u0004jz1FD\u0015\bhr/2V@/LL\u0017{yS{lQ\u0017{cM"
            .length();
         char var2 = 21;
         int var7 = -1;

         label25:
         while (true) {
            byte var10000 = 83;
            String var10001 = var3.substring(++var7, var7 + var2);
            byte var10002 = -1;

            while (true) {
               String var8 = a(var10000, a(var10001));
               switch (var10002) {
                  case 0:
                     var0[var4++] = var8;
                     if ((var7 += var2) >= var5) {
                        SSL = new TrustedCert.TrustedFor(var0[3]);
                        SIGNING_SERVER_CERTS = new TrustedCert.TrustedFor(var0[5]);
                        SIGNING_CLIENT_CERTS = new TrustedCert.TrustedFor(var0[4]);
                        SAML_ISSUER = new TrustedCert.TrustedFor(var0[1]);
                        SAML_ATTESTING_ENTITY = new TrustedCert.TrustedFor(var0[7]);
                        return;
                     }

                     var2 = var3.charAt(var7);
                     break;
                  default:
                     var0[var4++] = var8;
                     if ((var7 += var2) < var5) {
                        var2 = var3.charAt(var7);
                        continue label25;
                     }

                     var3 = "\u000f}t\u0014\u000fg\u007f*\\^t\u0003mt-P^g\u0003m}6AC";
                     var5 = "\u000f}t\u0014\u000fg\u007f*\\^t\u0003mt-P^g\u0003m}6AC".length();
                     var2 = 3;
                     var7 = -1;
               }

               var10000 = 84;
               var10001 = var3.substring(++var7, var7 + var2);
               var10002 = 0;
            }
         }
      }

      private static char[] a(String var0) {
         char[] var10000 = var0.toCharArray();
         if (var10000.length < 2) {
            var10000[0] = (char)(var10000[0] ^ 103);
         }

         return var10000;
      }

      private static String a(int var0, char[] var1) {
         int var10003 = var1.length;
         int var10002 = var0;
         char[] var10001 = var1;
         int var10000 = var10003;

         for (int var2 = 0; var10000 > var2; var2++) {
            var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
               case 0 -> 8;
               case 1 -> 122;
               case 2 -> 108;
               case 3 -> 48;
               case 4 -> 65;
               case 5 -> 68;
               default -> 103;
            });
         }

         return new String(var10001).intern();
      }
   }
}