package com.l7tech.external.assertions.gatewaymanagement.server;

import com.l7tech.common.io.CertGenParams;
import com.l7tech.common.io.CertUtils;
import com.l7tech.gateway.api.impl.PrivateKeySignCsrResult;
import com.l7tech.gateway.common.security.keystore.SsgKeyEntry;
import com.l7tech.gateway.common.security.rbac.OperationType;
import com.l7tech.objectmodel.EntityType;
import com.l7tech.objectmodel.ObjectModelException;
import com.l7tech.security.prov.JceProvider;
import com.l7tech.security.prov.RsaSignerEngine;
import com.l7tech.util.Eithers;
import com.l7tech.util.ExceptionUtils;
import com.l7tech.util.Eithers.E2;
import java.io.IOException;
import java.security.UnrecoverableKeyException;
import java.security.cert.CertificateEncodingException;
import java.security.cert.X509Certificate;
import java.util.Map;
import javax.security.auth.x500.X500Principal;
import org.bouncycastle.asn1.pkcs.CertificationRequestInfo;
import org.bouncycastle.pkcs.PKCS10CertificationRequest;

class cd
   implements ResourceFactorySupport.TransactionalCallback<E2<ResourceFactory.ResourceNotFoundException, ResourceFactory.InvalidResourceException, PrivateKeySignCsrResult>> {
   final Map val$selectorMap;
   final byte[] val$certificate;
   final String val$subjectDN;
   final Integer val$expiryAge;
   final String val$signatureAlgorithm;
   final String val$signatureHash;
   final PrivateKeyResourceFactory this$0;
   private static final String[] a;

   cd(PrivateKeyResourceFactory var1, Map var2, byte[] var3, String var4, Integer var5, String var6, String var7) {
      this.this$0 = var1;
      this.val$selectorMap = var2;
      this.val$certificate = var3;
      this.val$subjectDN = var4;
      this.val$expiryAge = var5;
      this.val$signatureAlgorithm = var6;
      this.val$signatureHash = var7;
   }

   public E2<ResourceFactory.ResourceNotFoundException, ResourceFactory.InvalidResourceException, PrivateKeySignCsrResult> execute() throws ObjectModelException {
      try {
         SsgKeyEntry var1 = this.this$0.a(this.this$0.a(this.val$selectorMap));
         this.this$0.checkPermittedForAnyEntity(OperationType.UPDATE, EntityType.SSG_KEY_ENTRY);

         X509Certificate var2;
         try {
            RsaSignerEngine var3 = JceProvider.getInstance().createRsaSignerEngine(var1.getPrivateKey(), var1.getCertificateChain());
            byte[] var4 = CertUtils.csrPemToBinary(this.val$certificate);

            X500Principal var5;
            label57: {
               label56: {
                  try {
                     if (this.val$subjectDN == null || this.val$subjectDN.isEmpty()) {
                        break label56;
                     }
                  } catch (UnrecoverableKeyException var12) {
                     throw a(var12);
                  }

                  var5 = new X500Principal(this.val$subjectDN);
                  break label57;
               }

               PKCS10CertificationRequest var6 = new PKCS10CertificationRequest(var4);
               CertificationRequestInfo var7 = var6.toASN1Structure().getCertificationRequestInfo();
               var5 = new X500Principal(var7.getSubject().toString());
            }

            CertGenParams var20 = new CertGenParams(var5, this.val$expiryAge, false, this.val$signatureAlgorithm);
            var20.setHashAlgorithm(this.val$signatureHash);
            var2 = (X509Certificate)var3.createCertificate(var4, var20.useUserCertDefaults());
         } catch (UnrecoverableKeyException var13) {
            String[] var25 = a;
            return Eithers.left2_1(new ResourceFactory.ResourceNotFoundException(var25[2], var13));
         } catch (IOException var14) {
            ResourceFactory.InvalidResourceException.ExceptionType var26 = ResourceFactory.InvalidResourceException.ExceptionType.INVALID_VALUES;
            String var27 = ExceptionUtils.getMessage(var14);
            String[] var24 = a;
            return Eithers.left2_2(new ResourceFactory.InvalidResourceException(var26, var24[3] + var27));
         } catch (Exception var15) {
            ResourceFactory.InvalidResourceException.ExceptionType var10002 = ResourceFactory.InvalidResourceException.ExceptionType.INVALID_VALUES;
            String var10003 = ExceptionUtils.getMessage(var15);
            String[] var10 = a;
            return Eithers.left2_2(new ResourceFactory.InvalidResourceException(var10002, var10[0] + var10003));
         }

         X509Certificate[] var17 = var1.getCertificateChain();
         X509Certificate[] var18 = new X509Certificate[var17.length + 1];
         System.arraycopy(var17, 0, var18, 1, var17.length);
         var18[0] = var2;
         String var19 = "";

         try {
            for (X509Certificate var9 : var18) {
               var19 = var19 + CertUtils.encodeAsPEM(var9);
            }
         } catch (CertificateEncodingException | IOException var11) {
            return Eithers.left2_2(
               new ResourceFactory.InvalidResourceException(
                  ResourceFactory.InvalidResourceException.ExceptionType.INVALID_VALUES, a[1] + ExceptionUtils.getMessage(var11)
               )
            );
         }

         PrivateKeySignCsrResult var22 = new PrivateKeySignCsrResult();
         var22.setCertData(var19);
         return Eithers.right2(var22);
      } catch (ResourceFactory.ResourceNotFoundException var16) {
         return Eithers.left2_1(var16);
      }
   }

   private static UnrecoverableKeyException a(UnrecoverableKeyException var0) {
      return var0;
   }

   static {
      String[] var5 = new String[4];
      int var3 = 0;
      String var2 = "g\t*iuloK\u001c6oi+<A\u001e*rn*uA\u001a,c=l#g\t*iulyL\u00187bn\"{\u0002\b1ai)x\u0002\u0018=ts%zK\u00189rbv<";
      int var4 = "g\t*iuloK\u001c6oi+<A\u001e*rn*uA\u001a,c=l#g\t*iulyL\u00187bn\"{\u0002\b1ai)x\u0002\u0018=ts%zK\u00189rbv<".length();
      char var1 = 27;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 108;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     a = var5;
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "q\u001f<\u007fczl]\u0003*y\u007f=*_\b70x4*_\b7ce5xQ\u001bq\u001f<\u007fczxQ\u001e*y\u007f=*W\u001e<0c?{A\b=d+z";
                  var4 = "q\u001f<\u007fczl]\u0003*y\u007f=*_\b70x4*_\b7ce5xQ\u001bq\u001f<\u007fczxQ\u001e*y\u007f=*W\u001e<0c?{A\b=d+z".length();
                  var1 = 29;
                  var7 = -1;
            }

            var10000 = 122;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 112);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 78;
            case 1 -> 23;
            case 2 -> 52;
            case 3 -> 106;
            case 4 -> 107;
            case 5 -> 32;
            default -> 112;
         });
      }

      return new String(var10001).intern();
   }
}