package okhttp3.repackaged;

import java.security.cert.Certificate;
import java.security.cert.X509Certificate;
import java.util.ArrayList;
import java.util.Arrays;
import java.util.Collections;
import java.util.List;
import javax.net.ssl.SSLPeerUnverifiedException;
import o.C15180gja;
import o.giP;
import okhttp3.repackaged.internal.Util;
import okhttp3.repackaged.internal.tls.CertificateChainCleaner;
import okhttp3.repackaged.internal.tls.TrustRootIndex;

/* loaded from: classes6.dex */
public final class CertificatePinner {
    public static final CertificatePinner DEFAULT = new Builder().build();
    private final List<a> ahe;
    private final TrustRootIndex ahf;

    private CertificatePinner(Builder builder) {
        this.ahe = Util.immutableList(builder.ahe);
        this.ahf = builder.ahf;
    }

    public final void check(String str, List<Certificate> list) throws SSLPeerUnverifiedException {
        List<a> findMatchingPins = findMatchingPins(str);
        if (findMatchingPins.isEmpty()) {
            return;
        }
        TrustRootIndex trustRootIndex = this.ahf;
        if (trustRootIndex != null) {
            list = new CertificateChainCleaner(trustRootIndex).clean(list);
        }
        int size = list.size();
        for (int i = 0; i < size; i++) {
            X509Certificate x509Certificate = (X509Certificate) list.get(i);
            int size2 = findMatchingPins.size();
            giP gip = null;
            giP gip2 = null;
            for (int i2 = 0; i2 < size2; i2++) {
                a aVar = findMatchingPins.get(i2);
                if (aVar.hashAlgorithm.equals("sha256/")) {
                    if (gip == null) {
                        gip = b(x509Certificate);
                    }
                    if (aVar.ahg.equals(gip)) {
                        return;
                    }
                } else if (aVar.hashAlgorithm.equals("sha1/")) {
                    if (gip2 == null) {
                        gip2 = a(x509Certificate);
                    }
                    if (aVar.ahg.equals(gip2)) {
                        return;
                    }
                } else {
                    throw new AssertionError();
                }
            }
        }
        StringBuilder sb = new StringBuilder("Certificate pinning failure!\n  Peer certificate chain:");
        int size3 = list.size();
        for (int i3 = 0; i3 < size3; i3++) {
            X509Certificate x509Certificate2 = (X509Certificate) list.get(i3);
            sb.append("\n    ");
            sb.append(pin(x509Certificate2));
            sb.append(": ");
            sb.append(x509Certificate2.getSubjectDN().getName());
        }
        sb.append("\n  Pinned certificates for ");
        sb.append(str);
        sb.append(":");
        int size4 = findMatchingPins.size();
        for (int i4 = 0; i4 < size4; i4++) {
            a aVar2 = findMatchingPins.get(i4);
            sb.append("\n    ");
            sb.append(aVar2);
        }
        throw new SSLPeerUnverifiedException(sb.toString());
    }

    public final void check(String str, Certificate... certificateArr) throws SSLPeerUnverifiedException {
        check(str, Arrays.asList(certificateArr));
    }

    final List<a> findMatchingPins(String str) {
        List<a> emptyList = Collections.emptyList();
        for (a aVar : this.ahe) {
            if (aVar.matches(str)) {
                if (emptyList.isEmpty()) {
                    emptyList = new ArrayList<>();
                }
                emptyList.add(aVar);
            }
        }
        return emptyList;
    }

    /* JADX INFO: Access modifiers changed from: package-private */
    public final Builder um() {
        return new Builder(this);
    }

    public static String pin(Certificate certificate) {
        if (!(certificate instanceof X509Certificate)) {
            throw new IllegalArgumentException("Certificate pinning requires X509 certificates");
        }
        StringBuilder sb = new StringBuilder("sha256/");
        sb.append(C15180gja.c(b((X509Certificate) certificate).d));
        return sb.toString();
    }

    static giP a(X509Certificate x509Certificate) {
        return Util.sha1(giP.c(x509Certificate.getPublicKey().getEncoded()));
    }

    static giP b(X509Certificate x509Certificate) {
        return Util.sha256(giP.c(x509Certificate.getPublicKey().getEncoded()));
    }

    /* JADX INFO: Access modifiers changed from: package-private */
    /* loaded from: classes6.dex */
    public static final class a {
        final giP ahg;
        final String hashAlgorithm;
        final String pattern;

        a(String str, String str2) {
            this.pattern = str;
            if (str2.startsWith("sha1/")) {
                this.hashAlgorithm = "sha1/";
                this.ahg = giP.d(str2.substring(5));
            } else if (str2.startsWith("sha256/")) {
                this.hashAlgorithm = "sha256/";
                this.ahg = giP.d(str2.substring(7));
            } else {
                throw new IllegalArgumentException("pins must start with 'sha256/' or 'sha1/': ".concat(String.valueOf(str2)));
            }
            if (this.ahg == null) {
                throw new IllegalArgumentException("pins must be base64: ".concat(String.valueOf(str2)));
            }
        }

        final boolean matches(String str) {
            if (this.pattern.equals(str)) {
                return true;
            }
            int indexOf = str.indexOf(46);
            if (this.pattern.startsWith("*.")) {
                if (str.regionMatches(false, indexOf + 1, this.pattern, 2, r6.length() - 2)) {
                    return true;
                }
            }
            return false;
        }

        public final boolean equals(Object obj) {
            if (obj instanceof a) {
                a aVar = (a) obj;
                if (this.pattern.equals(aVar.pattern) && this.hashAlgorithm.equals(aVar.hashAlgorithm) && this.ahg.equals(aVar.ahg)) {
                    return true;
                }
            }
            return false;
        }

        public final int hashCode() {
            int hashCode = this.pattern.hashCode();
            return ((((hashCode + 527) * 31) + this.hashAlgorithm.hashCode()) * 31) + this.ahg.hashCode();
        }

        public final String toString() {
            StringBuilder sb = new StringBuilder();
            sb.append(this.hashAlgorithm);
            sb.append(C15180gja.c(this.ahg.d));
            return sb.toString();
        }
    }

    /* loaded from: classes6.dex */
    public static final class Builder {
        private final List<a> ahe;
        private TrustRootIndex ahf;

        public Builder() {
            this.ahe = new ArrayList();
        }

        Builder(CertificatePinner certificatePinner) {
            ArrayList arrayList = new ArrayList();
            this.ahe = arrayList;
            arrayList.addAll(certificatePinner.ahe);
            this.ahf = certificatePinner.ahf;
        }

        public final Builder add(String str, String... strArr) {
            if (str == null) {
                throw new IllegalArgumentException("pattern == null");
            }
            for (String str2 : strArr) {
                this.ahe.add(new a(str, str2));
            }
            return this;
        }

        public final CertificatePinner build() {
            return new CertificatePinner(this);
        }

        public final Builder trustRootIndex(TrustRootIndex trustRootIndex) {
            this.ahf = trustRootIndex;
            return this;
        }
    }
}