public final class io.vertx.ext.auth.impl.CertificateHelper
  minor version: 0
  major version: 59
  flags: flags: (0x0031) ACC_PUBLIC, ACC_FINAL, ACC_SUPER
  this_class: io.vertx.ext.auth.impl.CertificateHelper
  super_class: java.lang.Object
{
  private static final io.vertx.core.impl.logging.Logger LOG;
    descriptor: Lio/vertx/core/impl/logging/Logger;
    flags: (0x001a) ACC_PRIVATE, ACC_STATIC, ACC_FINAL

  static void <clinit>();
    descriptor: ()V
    flags: (0x0008) ACC_STATIC
    Code:
      stack=1, locals=0, args_size=0
         0: .line 37
            ldc Lio/vertx/ext/auth/impl/CertificateHelper;
            invokestatic io.vertx.core.impl.logging.LoggerFactory.getLogger:(Ljava/lang/Class;)Lio/vertx/core/impl/logging/Logger;
            putstatic io.vertx.ext.auth.impl.CertificateHelper.LOG:Lio/vertx/core/impl/logging/Logger;
            return
      LocalVariableTable:
        Start  End  Slot  Name  Signature

  private void <init>();
    descriptor: ()V
    flags: (0x0002) ACC_PRIVATE
    Code:
      stack=1, locals=1, args_size=1
        start local 0 // io.vertx.ext.auth.impl.CertificateHelper this
         0: .line 82
            aload 0 /* this */
            invokespecial java.lang.Object.<init>:()V
         1: .line 83
            return
        end local 0 // io.vertx.ext.auth.impl.CertificateHelper this
      LocalVariableTable:
        Start  End  Slot  Name  Signature
            0    2     0  this  Lio/vertx/ext/auth/impl/CertificateHelper;

  public static void checkValidity(java.util.List<java.security.cert.X509Certificate>, java.util.List<java.security.cert.X509CRL>);
    descriptor: (Ljava/util/List;Ljava/util/List;)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=3, locals=2, args_size=2
        start local 0 // java.util.List certificates
        start local 1 // java.util.List crls
         0: .line 86
            aload 0 /* certificates */
            iconst_1
            aload 1 /* crls */
            invokestatic io.vertx.ext.auth.impl.CertificateHelper.checkValidity:(Ljava/util/List;ZLjava/util/List;)V
         1: .line 87
            return
        end local 1 // java.util.List crls
        end local 0 // java.util.List certificates
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0    2     0  certificates  Ljava/util/List<Ljava/security/cert/X509Certificate;>;
            0    2     1          crls  Ljava/util/List<Ljava/security/cert/X509CRL;>;
    Exceptions:
      throws java.security.cert.CertificateException, java.security.NoSuchAlgorithmException, java.security.InvalidKeyException, java.security.SignatureException, java.security.NoSuchProviderException
    Signature: (Ljava/util/List<Ljava/security/cert/X509Certificate;>;Ljava/util/List<Ljava/security/cert/X509CRL;>;)V
    MethodParameters:
              Name  Flags
      certificates  
      crls          

  public static void checkValidity(java.util.List<java.security.cert.X509Certificate>, boolean, java.util.List<java.security.cert.X509CRL>);
    descriptor: (Ljava/util/List;ZLjava/util/List;)V
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=5, locals=9, args_size=3
        start local 0 // java.util.List certificates
        start local 1 // boolean withRootCA
        start local 2 // java.util.List crls
         0: .line 91
            aload 0 /* certificates */
            ifnull 1
            aload 0 /* certificates */
            invokeinterface java.util.List.size:()I
            ifne 2
         1: .line 92
      StackMap locals:
      StackMap stack:
            new java.security.cert.CertificateException
            dup
            ldc "empty chain"
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
         2: .line 95
      StackMap locals:
      StackMap stack:
            invokestatic java.lang.System.currentTimeMillis:()J
            lstore 3 /* now */
        start local 3 // long now
         3: .line 97
            iconst_0
            istore 5 /* i */
        start local 5 // int i
         4: goto 23
         5: .line 98
      StackMap locals: long int
      StackMap stack:
            aload 0 /* certificates */
            iload 5 /* i */
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 6 /* subjectCert */
        start local 6 // java.security.cert.X509Certificate subjectCert
         6: .line 99
            aload 6 /* subjectCert */
            invokevirtual java.security.cert.X509Certificate.checkValidity:()V
         7: .line 101
            aload 2 /* crls */
            ifnull 15
         8: .line 102
            aload 2 /* crls */
            invokeinterface java.util.List.iterator:()Ljava/util/Iterator;
            astore 8
            goto 14
      StackMap locals: java.util.List int java.util.List long int java.security.cert.X509Certificate top java.util.Iterator
      StackMap stack:
         9: aload 8
            invokeinterface java.util.Iterator.next:()Ljava/lang/Object;
            checkcast java.security.cert.X509CRL
            astore 7 /* crl */
        start local 7 // java.security.cert.X509CRL crl
        10: .line 103
            aload 7 /* crl */
            invokevirtual java.security.cert.X509CRL.getNextUpdate:()Ljava/util/Date;
            invokevirtual java.util.Date.getTime:()J
            lload 3 /* now */
            lcmp
            ifge 12
        11: .line 104
            getstatic io.vertx.ext.auth.impl.CertificateHelper.LOG:Lio/vertx/core/impl/logging/Logger;
            ldc "CRL is out of date nextUpdate < now"
            invokeinterface io.vertx.core.impl.logging.Logger.warn:(Ljava/lang/Object;)V
        12: .line 106
      StackMap locals: java.util.List int java.util.List long int java.security.cert.X509Certificate java.security.cert.X509CRL java.util.Iterator
      StackMap stack:
            aload 7 /* crl */
            aload 6 /* subjectCert */
            invokevirtual java.security.cert.X509CRL.isRevoked:(Ljava/security/cert/Certificate;)Z
            ifeq 14
        13: .line 107
            new java.security.cert.CertificateException
            dup
            ldc "Certificate is revoked"
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
        end local 7 // java.security.cert.X509CRL crl
        14: .line 102
      StackMap locals: java.util.List int java.util.List long int java.security.cert.X509Certificate top java.util.Iterator
      StackMap stack:
            aload 8
            invokeinterface java.util.Iterator.hasNext:()Z
            ifne 9
        15: .line 113
      StackMap locals: java.util.List int java.util.List long int java.security.cert.X509Certificate
      StackMap stack:
            aload 0 /* certificates */
            invokeinterface java.util.List.size:()I
            iconst_1
            if_icmpne 17
        16: .line 114
            return
        17: .line 119
      StackMap locals:
      StackMap stack:
            iload 5 /* i */
            iconst_1
            iadd
            aload 0 /* certificates */
            invokeinterface java.util.List.size:()I
            if_icmpge 22
        18: .line 120
            aload 0 /* certificates */
            iload 5 /* i */
            iconst_1
            iadd
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 7 /* issuerCert */
        start local 7 // java.security.cert.X509Certificate issuerCert
        19: .line 122
            aload 6 /* subjectCert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            aload 7 /* issuerCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual javax.security.auth.x500.X500Principal.equals:(Ljava/lang/Object;)Z
            ifne 21
        20: .line 123
            new java.security.cert.CertificateException
            dup
            new java.lang.StringBuilder
            dup
            ldc "Certificate path issuers dont match: ["
            invokespecial java.lang.StringBuilder.<init>:(Ljava/lang/String;)V
            aload 6 /* subjectCert */
            invokevirtual java.security.cert.X509Certificate.getIssuerX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "] != ["
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            aload 7 /* issuerCert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/Object;)Ljava/lang/StringBuilder;
            ldc "]"
            invokevirtual java.lang.StringBuilder.append:(Ljava/lang/String;)Ljava/lang/StringBuilder;
            invokevirtual java.lang.StringBuilder.toString:()Ljava/lang/String;
            invokespecial java.security.cert.CertificateException.<init>:(Ljava/lang/String;)V
            athrow
        21: .line 126
      StackMap locals: java.security.cert.X509Certificate
      StackMap stack:
            aload 6 /* subjectCert */
            aload 7 /* issuerCert */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;)V
        end local 7 // java.security.cert.X509Certificate issuerCert
        end local 6 // java.security.cert.X509Certificate subjectCert
        22: .line 97
      StackMap locals:
      StackMap stack:
            iinc 5 /* i */ 1
      StackMap locals:
      StackMap stack:
        23: iload 5 /* i */
            aload 0 /* certificates */
            invokeinterface java.util.List.size:()I
            if_icmplt 5
        end local 5 // int i
        24: .line 130
            iload 1 /* withRootCA */
            ifeq 27
        25: .line 132
            aload 0 /* certificates */
            aload 0 /* certificates */
            invokeinterface java.util.List.size:()I
            iconst_1
            isub
            invokeinterface java.util.List.get:(I)Ljava/lang/Object;
            checkcast java.security.cert.X509Certificate
            astore 5 /* root */
        start local 5 // java.security.cert.X509Certificate root
        26: .line 133
            aload 5 /* root */
            aload 5 /* root */
            invokevirtual java.security.cert.X509Certificate.getPublicKey:()Ljava/security/PublicKey;
            invokevirtual java.security.cert.X509Certificate.verify:(Ljava/security/PublicKey;)V
        end local 5 // java.security.cert.X509Certificate root
        27: .line 135
      StackMap locals:
      StackMap stack:
            return
        end local 3 // long now
        end local 2 // java.util.List crls
        end local 1 // boolean withRootCA
        end local 0 // java.util.List certificates
      LocalVariableTable:
        Start  End  Slot          Name  Signature
            0   28     0  certificates  Ljava/util/List<Ljava/security/cert/X509Certificate;>;
            0   28     1    withRootCA  Z
            0   28     2          crls  Ljava/util/List<Ljava/security/cert/X509CRL;>;
            3   28     3           now  J
            4   24     5             i  I
            6   22     6   subjectCert  Ljava/security/cert/X509Certificate;
           10   14     7           crl  Ljava/security/cert/X509CRL;
           19   22     7    issuerCert  Ljava/security/cert/X509Certificate;
           26   27     5          root  Ljava/security/cert/X509Certificate;
    Exceptions:
      throws java.security.cert.CertificateException, java.security.NoSuchAlgorithmException, java.security.InvalidKeyException, java.security.SignatureException, java.security.NoSuchProviderException
    Signature: (Ljava/util/List<Ljava/security/cert/X509Certificate;>;ZLjava/util/List<Ljava/security/cert/X509CRL;>;)V
    MethodParameters:
              Name  Flags
      certificates  
      withRootCA    
      crls          

  public static io.vertx.ext.auth.impl.CertificateHelper$CertInfo getCertInfo(java.security.cert.X509Certificate);
    descriptor: (Ljava/security/cert/X509Certificate;)Lio/vertx/ext/auth/impl/CertificateHelper$CertInfo;
    flags: (0x0009) ACC_PUBLIC, ACC_STATIC
    Code:
      stack=5, locals=7, args_size=1
        start local 0 // java.security.cert.X509Certificate cert
         0: .line 139
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getSubjectX500Principal:()Ljavax/security/auth/x500/X500Principal;
            ldc "RFC2253"
            invokevirtual javax.security.auth.x500.X500Principal.getName:(Ljava/lang/String;)Ljava/lang/String;
            astore 1 /* subject */
        start local 1 // java.lang.String subject
         1: .line 140
            aconst_null
            astore 2 /* sub */
        start local 2 // java.util.Map sub
         2: .line 142
            aload 1 /* subject */
            ifnull 17
            ldc ""
            aload 1 /* subject */
            invokevirtual java.lang.String.equals:(Ljava/lang/Object;)Z
            ifne 17
         3: .line 144
            new javax.naming.ldap.LdapName
            dup
            aload 1 /* subject */
            invokespecial javax.naming.ldap.LdapName.<init>:(Ljava/lang/String;)V
            astore 3 /* rfc2253 */
        start local 3 // javax.naming.ldap.LdapName rfc2253
         4: .line 145
            new java.util.HashMap
            dup
            invokespecial java.util.HashMap.<init>:()V
            astore 2 /* sub */
         5: .line 146
            iconst_0
            istore 4 /* i */
        start local 4 // int i
         6: goto 14
         7: .line 147
      StackMap locals: java.security.cert.X509Certificate java.lang.String java.util.Map javax.naming.ldap.LdapName int
      StackMap stack:
            aload 3 /* rfc2253 */
            iload 4 /* i */
            invokevirtual javax.naming.ldap.LdapName.get:(I)Ljava/lang/String;
            astore 5 /* value */
        start local 5 // java.lang.String value
         8: .line 148
            aload 5 /* value */
            bipush 61
            invokevirtual java.lang.String.indexOf:(I)I
            istore 6 /* idx */
        start local 6 // int idx
         9: .line 149
            iload 6 /* idx */
            iconst_m1
            if_icmpeq 12
        10: .line 150
            aload 2 /* sub */
            aload 5 /* value */
            iconst_0
            iload 6 /* idx */
            invokevirtual java.lang.String.substring:(II)Ljava/lang/String;
            aload 5 /* value */
            iload 6 /* idx */
            iconst_1
            iadd
            invokevirtual java.lang.String.substring:(I)Ljava/lang/String;
            invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
            pop
        11: .line 151
            goto 13
        12: .line 152
      StackMap locals: java.lang.String int
      StackMap stack:
            aload 2 /* sub */
            aload 5 /* value */
            aconst_null
            invokeinterface java.util.Map.put:(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;
            pop
        end local 6 // int idx
        end local 5 // java.lang.String value
        13: .line 146
      StackMap locals:
      StackMap stack:
            iinc 4 /* i */ 1
      StackMap locals:
      StackMap stack:
        14: iload 4 /* i */
            aload 3 /* rfc2253 */
            invokevirtual javax.naming.ldap.LdapName.size:()I
            if_icmplt 7
        end local 4 // int i
        end local 3 // javax.naming.ldap.LdapName rfc2253
        15: .line 155
            goto 17
      StackMap locals: java.security.cert.X509Certificate java.lang.String java.util.Map
      StackMap stack: javax.naming.InvalidNameException
        16: pop
        17: .line 160
      StackMap locals:
      StackMap stack:
            new io.vertx.ext.auth.impl.CertificateHelper$CertInfo
            dup
            aload 2 /* sub */
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getVersion:()I
            aload 0 /* cert */
            invokevirtual java.security.cert.X509Certificate.getBasicConstraints:()I
            invokespecial io.vertx.ext.auth.impl.CertificateHelper$CertInfo.<init>:(Ljava/util/Map;II)V
            areturn
        end local 2 // java.util.Map sub
        end local 1 // java.lang.String subject
        end local 0 // java.security.cert.X509Certificate cert
      LocalVariableTable:
        Start  End  Slot     Name  Signature
            0   18     0     cert  Ljava/security/cert/X509Certificate;
            1   18     1  subject  Ljava/lang/String;
            2   18     2      sub  Ljava/util/Map<Ljava/lang/String;Ljava/lang/String;>;
            4   15     3  rfc2253  Ljavax/naming/ldap/LdapName;
            6   15     4        i  I
            8   13     5    value  Ljava/lang/String;
            9   13     6      idx  I
      Exception table:
        from    to  target  type
           3    15      16  Class javax.naming.InvalidNameException
    MethodParameters:
      Name  Flags
      cert  
}
SourceFile: "CertificateHelper.java"
NestMembers:
  io.vertx.ext.auth.impl.CertificateHelper$CertInfo
InnerClasses:
  public final CertInfo = io.vertx.ext.auth.impl.CertificateHelper$CertInfo of io.vertx.ext.auth.impl.CertificateHelper