public class org.apache.hive.kudu.org.apache.kudu.client.Negotiator extends org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.SimpleChannelInboundHandler { private static final org.slf4j.Logger LOG; private final org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslClientCallbackHandler saslCallback; private static final org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.collect.ImmutableSet SUPPORTED_RPC_FEATURES; static final int CONNECTION_CTX_CALL_ID; static final int SASL_CALL_ID; static final java.lang.String[] PREFERRED_CIPHER_SUITES; private final java.lang.String remoteHostname; private final org.apache.hive.kudu.org.apache.kudu.client.SecurityContext securityContext; private final org.apache.hive.kudu.org.apache.kudu.security.Token$SignedTokenPB authnToken; private org.apache.hive.kudu.org.apache.kudu.client.Negotiator$AuthnTokenNotUsedReason authnTokenNotUsedReason; private org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State state; private javax.security.sasl.SaslClient saslClient; private org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslMechanism chosenMech; private org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase chosenAuthnType; private java.util.Set serverFeatures; private org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.embedded.EmbeddedChannel sslEmbedder; private byte[] nonce; private org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.util.concurrent.Future sslHandshakeFuture; private java.security.cert.Certificate peerCert; boolean overrideLoopbackForTests; static final boolean $assertionsDisabled; public void (java.lang.String, org.apache.hive.kudu.org.apache.kudu.client.SecurityContext, boolean) { org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v; org.apache.hive.kudu.org.apache.kudu.client.SecurityContext v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$AuthnTokenNotUsedReason v, v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslClientCallbackHandler v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.security.Token$SignedTokenPB v; java.lang.String v; boolean v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: java.lang.String; v := @parameter: org.apache.hive.kudu.org.apache.kudu.client.SecurityContext; v := @parameter: boolean; specialinvoke v.()>(); v = new org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslClientCallbackHandler; specialinvoke v.(org.apache.hive.kudu.org.apache.kudu.client.Negotiator)>(v); v. = v; v. = null; v = ; v. = v; v. = v; v. = v; v = virtualinvoke v.(); if v == null goto label; if v == 0 goto label; v. = null; v = ; v. = v; goto label; label: v = virtualinvoke v.(); if v != 0 goto label; v. = null; v = ; v. = v; goto label; label: v. = v; goto label; label: v. = null; v = ; v. = v; label: return; } public void sendHello(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) { org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; specialinvoke v.(v); return; } private void sendNegotiateMessage(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.collect.ImmutableSet v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$Sasl v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$Builder v, v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$Token v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$RpcFeatureFlag v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$Builder v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.security.Token$SignedTokenPB v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.collect.UnmodifiableIterator v; java.lang.Object v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = staticinvoke (); v = ; v = virtualinvoke v.(v); v = ; v = virtualinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); virtualinvoke v.(v); goto label; label: v = interfaceinvoke v.(); v = specialinvoke v.(v); if v == 0 goto label; v = ; virtualinvoke v.(v); label: v = virtualinvoke v.(); v = staticinvoke (); virtualinvoke v.(v); v = v.; if v == null goto label; v = virtualinvoke v.(); v = staticinvoke (); virtualinvoke v.(v); label: v = ; v. = v; v = virtualinvoke v.(); specialinvoke v.(v, v); return; } private void sendSaslMessage(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelPromise v; org.apache.hive.kudu.org.apache.kudu.client.RpcOutboundMessage v; int v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$RequestHeader$Builder v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = staticinvoke (); v = (int) -33; virtualinvoke v.(v); v = new org.apache.hive.kudu.org.apache.kudu.client.RpcOutboundMessage; specialinvoke v.(org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$RequestHeader$Builder,org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.Message)>(v, v); v = interfaceinvoke v.(); interfaceinvoke v.(v, v); return; } public void channelRead0(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.client.CallResponse) throws java.io.IOException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; java.lang.IllegalStateException v; java.net.SocketAddress v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$ResponseHeader v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$Failure v; org.apache.hive.kudu.org.apache.kudu.client.CallResponse v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$ErrorStatusPB$Builder v; int[] v; int v, v; java.lang.String v, v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v, v, v; org.apache.hive.kudu.org.apache.kudu.util.Slice v; org.slf4j.Logger v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelPipeline v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$ErrorStatusPB v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.client.CallResponse; v = virtualinvoke v.(); v = virtualinvoke v.(); if v == 0 goto label; v = staticinvoke (); v = virtualinvoke v.(); staticinvoke (v, v); v = virtualinvoke v.(); v = ; v = interfaceinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(); interfaceinvoke v.("peer {} sent connection negotiation error: {}", v, v); v = ; v. = v; v = interfaceinvoke v.(); interfaceinvoke v.(v); v = new org.apache.hive.kudu.org.apache.kudu.client.Negotiator$Failure; specialinvoke v.(org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$ErrorStatusPB)>(v); interfaceinvoke v.(v); return; label: v = specialinvoke v.(v); v = ; v = v.; v = virtualinvoke v.(); v = v[v]; tableswitch(v) { case 1: goto label; case 2: goto label; case 3: goto label; case 4: goto label; default: goto label; }; label: specialinvoke v.(v, v); goto label; label: specialinvoke v.(v, v); goto label; label: specialinvoke v.(v, v); goto label; label: specialinvoke v.(v, v); goto label; label: v = new java.lang.IllegalStateException; v = v.; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("received a message in unexpected state: \u0001"); specialinvoke v.(java.lang.String)>(v); throw v; label: return; } private void handleSaslMessage(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws java.io.IOException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; java.lang.IllegalStateException v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; int[] v; int v, v; java.lang.String v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = ; v = virtualinvoke v.(); v = virtualinvoke v.(); v = v[v]; lookupswitch(v) { case 1: goto label; case 2: goto label; default: goto label; }; label: specialinvoke v.(v, v); goto label; label: specialinvoke v.(v, v); goto label; label: v = new java.lang.IllegalStateException; v = virtualinvoke v.(); v = dynamicinvoke "makeConcatWithConstants" (v) ("Wrong negotiation step: \u0001"); specialinvoke v.(java.lang.String)>(v); throw v; label: return; } private org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB parseSaslMsgResponse(org.apache.hive.kudu.org.apache.kudu.client.CallResponse) { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.util.Slice v; java.lang.IllegalStateException v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$ResponseHeader v; org.apache.hive.kudu.org.apache.kudu.client.CallResponse v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$Builder v; int v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.client.CallResponse; v = virtualinvoke v.(); v = virtualinvoke v.(); v = (int) -33; if v == v goto label; v = new java.lang.IllegalStateException; specialinvoke v.(java.lang.String)>("Received a call that wasn\'t for SASL"); throw v; label: v = staticinvoke (); v = virtualinvoke v.(); staticinvoke (v, v); v = virtualinvoke v.(); return v; } private void handleNegotiateResponse(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws java.io.IOException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$RpcFeatureFlag v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v, v, v; java.util.Set v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase v, v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = virtualinvoke v.(); v = ; if v != v goto label; v = 1; goto label; label: v = 0; label: v = virtualinvoke v.(); staticinvoke (v, "Expected NEGOTIATE message, got {}", v); v = specialinvoke v.(v); v. = v; v = v.; v = ; v = interfaceinvoke v.(v); v = specialinvoke v.(v); v. = v; v = v.; v = ; if v != v goto label; specialinvoke v.(v); label: if v == 0 goto label; specialinvoke v.(v); goto label; label: specialinvoke v.(v); label: return; } private boolean isLoopbackConnection(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel) { java.net.SocketAddress v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel v; java.lang.ClassCastException v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; java.net.InetAddress v, v; boolean v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel; v = v.; if v == 0 goto label; return 1; label: v = interfaceinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(v); label: return v; label: v := @caughtexception; return 0; catch java.lang.ClassCastException from label to label with label; } private void chooseAndInitializeSaslMech(org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws org.apache.hive.kudu.org.apache.kudu.client.KuduException { org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslMechanism[] v; org.apache.hive.kudu.org.apache.kudu.client.SecurityContext v, v; javax.security.sasl.SaslException v; javax.security.sasl.SaslClient v; byte v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.base.Joiner v; java.util.Set v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslMechanism v, v, v, v, v, v, v, v, v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; java.lang.String v, v, v, v, v, v, v, v, v, v, v, v, v, v, v, v; org.apache.hive.kudu.org.apache.kudu.client.NonRecoverableException v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.base.Joiner$MapJoiner v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$AuthnTokenNotUsedReason v, v; java.util.Locale v; boolean v, v, v, v, v, v, v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslClientCallbackHandler v; java.util.List v; java.lang.String[] v; java.util.HashMap v, v; java.util.HashSet v; int v, v, v, v; org.slf4j.Logger v; java.util.Iterator v; org.apache.hive.kudu.org.apache.kudu.client.Status v, v; javax.security.auth.Subject v; org.apache.hive.kudu.org.apache.kudu.security.Token$SignedTokenPB v; org.apache.hive.kudu.org.apache.kudu.client.RecoverableException v; java.lang.Object v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = v.; virtualinvoke v.(); v = staticinvoke (); v = staticinvoke (); v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = virtualinvoke v.(); v = ; v = virtualinvoke v.(v); v = -1; v = virtualinvoke v.(); lookupswitch(v) { case 76210602: goto label; case 2111859635: goto label; default: goto label; }; label: v = virtualinvoke v.("GSSAPI"); if v == 0 goto label; v = 0; goto label; label: v = virtualinvoke v.("PLAIN"); if v == 0 goto label; v = 1; label: lookupswitch(v) { case 0: goto label; case 1: goto label; default: goto label; }; label: v = ; interfaceinvoke v.(v); goto label; label: v = ; interfaceinvoke v.(v); goto label; label: v = virtualinvoke v.(); interfaceinvoke v.(v, "unrecognized mechanism"); goto label; label: v = staticinvoke (); v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = ; v = virtualinvoke v.(v); if v == 0 goto label; v = v.; v = virtualinvoke v.(); if v == null goto label; v = virtualinvoke v.(class "Ljavax/security/auth/kerberos/KerberosTicket;"); v = interfaceinvoke v.(); if v == 0 goto label; label: v = virtualinvoke v.(); interfaceinvoke v.(v, "client does not have Kerberos credentials (tgt)"); goto label; label: v = staticinvoke (v); if v == 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.(v, "client Kerberos credentials (TGT) have expired"); goto label; label: v = interfaceinvoke v.(v); if v != 0 goto label; v = virtualinvoke v.(); interfaceinvoke v.(v, "not advertised by server"); goto label; label: v = staticinvoke (); v = ; if v != v goto label; interfaceinvoke v.("javax.security.sasl.qop", "auth-int"); label: v = newarray (java.lang.String)[1]; v = virtualinvoke v.(); v[0] = v; v = v.; v = v.; v = staticinvoke (v, null, "kudu", v, v, v); v. = v; v. = v; label: goto label; label: v := @caughtexception; v = virtualinvoke v.(); v = virtualinvoke v.(); interfaceinvoke v.(v, v); label: v = v + 1; goto label; label: v = v.; if v == null goto label; v = ; v = v.; v = virtualinvoke v.(); v = v.; interfaceinvoke v.("SASL mechanism {} chosen for peer {}", v, v); return; label: v = interfaceinvoke v.(); if v != 1 goto label; v = ; v = interfaceinvoke v.(v); if v == 0 goto label; v = ; v = virtualinvoke v.(); v = interfaceinvoke v.(v); v = dynamicinvoke "makeConcatWithConstants" (v) ("server requires authentication, but \u0001"); goto label; label: v = staticinvoke (", "); v = virtualinvoke v.(": "); v = virtualinvoke v.(v); v = dynamicinvoke "makeConcatWithConstants" (v) ("client/server supported SASL mechanism mismatch: [\u]"); label: v = v.; if v == null goto label; v = v.; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v, v) ("\u. Authentication tokens were not used because \u0001"); label: v = v.; if v == null goto label; v = new org.apache.hive.kudu.org.apache.kudu.client.RecoverableException; v = staticinvoke (v); specialinvoke v.(org.apache.hive.kudu.org.apache.kudu.client.Status)>(v); throw v; label: v = new org.apache.hive.kudu.org.apache.kudu.client.NonRecoverableException; v = staticinvoke (v); specialinvoke v.(org.apache.hive.kudu.org.apache.kudu.client.Status)>(v); throw v; catch javax.security.sasl.SaslException from label to label with label; } private org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase chooseAuthenticationType(org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$AuthnTokenNotUsedReason v; int[] v; int v, v, v, v; java.lang.String v; boolean v; java.lang.IllegalArgumentException v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.security.Token$SignedTokenPB v, v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase v, v, v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = virtualinvoke v.(); if v > 1 goto label; v = 1; goto label; label: v = 0; label: staticinvoke (v, "Expected server to reply with at most one authn type"); v = virtualinvoke v.(); if v != 0 goto label; v = ; return v; label: v = virtualinvoke v.(0); v = virtualinvoke v.(); v = ; v = virtualinvoke v.(); v = v[v]; lookupswitch(v) { case 1: goto label; case 2: goto label; default: goto label; }; label: v = v.; if v == null goto label; v = ; v. = v; goto label; label: v = v.; if v != null goto label; v = new java.lang.IllegalArgumentException; specialinvoke v.(java.lang.String)>("server chose token authentication but client had no valid token"); throw v; label: v = new java.lang.IllegalArgumentException; v = v.; v = dynamicinvoke "makeConcatWithConstants" (v) ("server chose bad authn type \u0001"); specialinvoke v.(java.lang.String)>(v); throw v; label: return v; } private java.util.Set getFeatureFlags(org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$RpcFeatureFlag v; java.util.Iterator v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.collect.ImmutableSet v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.collect.ImmutableSet$Builder v; java.util.List v; java.lang.Object v; boolean v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = staticinvoke (); v = virtualinvoke v.(); v = interfaceinvoke v.(); label: v = interfaceinvoke v.(); if v == 0 goto label; v = interfaceinvoke v.(); v = ; if v == v goto label; virtualinvoke v.(v); goto label; label: v = virtualinvoke v.(); return v; } private void startTlsHandshake(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) throws javax.net.ssl.SSLException { org.apache.hive.kudu.org.apache.kudu.client.SecurityContext v, v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.common.base.Joiner v; int[] v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandler[] v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.embedded.EmbeddedChannel v; boolean v, v, v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; java.lang.Object[] v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.util.concurrent.Future v; java.lang.String[] v, v, v; java.lang.AssertionError v, v; java.util.ArrayList v; javax.net.ssl.SSLEngine v; java.util.HashSet v; int v, v, v, v; java.lang.String v, v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SharableSslHandler v; java.lang.RuntimeException v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = ; v = v.; v = virtualinvoke v.(); v = v[v]; lookupswitch(v) { case 1: goto label; case 2: goto label; default: goto label; }; label: v = v.; v = virtualinvoke v.(); goto label; label: v = v.; v = virtualinvoke v.(); goto label; label: v = new java.lang.AssertionError; specialinvoke v.(java.lang.Object)>("unreachable"); throw v; label: virtualinvoke v.(1); v = virtualinvoke v.(); v = staticinvoke (v); v = staticinvoke (); v = ; v = lengthof v; v = 0; label: if v >= v goto label; v = v[v]; v = interfaceinvoke v.(v); if v == 0 goto label; interfaceinvoke v.(v); label: v = v + 1; goto label; label: v = interfaceinvoke v.(); if v == 0 goto label; v = new java.lang.RuntimeException; v = staticinvoke (44); v = virtualinvoke v.(v); v = dynamicinvoke "makeConcatWithConstants" (v) ("No preferred cipher suites were supported. Supported suites: \u0001"); specialinvoke v.(java.lang.String)>(v); throw v; label: v = newarray (java.lang.String)[0]; v = interfaceinvoke v.(v); virtualinvoke v.(v); v = new org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SharableSslHandler; specialinvoke v.(javax.net.ssl.SSLEngine)>(v); v = new org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.embedded.EmbeddedChannel; v = newarray (org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandler)[1]; v[0] = v; specialinvoke v.(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandler[])>(v); v. = v; v = virtualinvoke v.(); v. = v; v = ; v. = v; v = specialinvoke v.(v); v = ; if v != 0 goto label; if v != 0 goto label; v = new java.lang.AssertionError; specialinvoke v.()>(); throw v; label: return; } private void handleTlsMessage(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws java.io.IOException { org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandler v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v, v; java.nio.ByteBuffer v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.embedded.EmbeddedChannel v, v, v; boolean v, v, v, v, v, v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel v; java.util.Set v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; java.security.cert.Certificate v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelPipeline v, v; java.security.cert.Certificate[] v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; java.lang.Object[] v; javax.net.ssl.SSLEngine v; javax.net.ssl.SSLSession v; int v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$RpcFeatureFlag v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.buffer.ByteBuf v; javax.net.ssl.SSLPeerUnverifiedException v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = virtualinvoke v.(); v = ; if v != v goto label; v = 1; goto label; label: v = 0; label: staticinvoke (v); v = virtualinvoke v.(); v = virtualinvoke v.(); if v != 0 goto label; v = 1; goto label; label: v = 0; label: staticinvoke (v, "empty TLS message from server"); v = v.; v = newarray (java.lang.Object)[1]; v = virtualinvoke v.(); v = virtualinvoke v.(); v = staticinvoke (v); v[0] = v; virtualinvoke v.(v); v = v.; virtualinvoke v.(); v = specialinvoke v.(v); if v == 0 goto label; return; label: v = v.; v = virtualinvoke v.(); v = interfaceinvoke v.(); virtualinvoke v.(); v = virtualinvoke v.(); v = virtualinvoke v.(); v = interfaceinvoke v.(); v = lengthof v; if v != 0 goto label; v = new javax.net.ssl.SSLPeerUnverifiedException; specialinvoke v.(java.lang.String)>("no peer cert found"); throw v; label: v = v[0]; v. = v; v = v.; v = ; v = interfaceinvoke v.(v); if v == 0 goto label; v = interfaceinvoke v.(); v = specialinvoke v.(v); if v == 0 goto label; v = 1; goto label; label: v = 0; label: if v != 0 goto label; v = interfaceinvoke v.(); interfaceinvoke v.("tls", v); label: specialinvoke v.(v); return; } private boolean sendPendingOutboundTls(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) { org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.util.concurrent.Future v; java.lang.AssertionError v, v; java.nio.ByteBuffer v; java.util.ArrayList v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v, v; int v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.embedded.EmbeddedChannel v, v; boolean v, v, v, v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; java.lang.Object v; java.util.Queue v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = staticinvoke (); label: v = v.; v = virtualinvoke v.(); v = interfaceinvoke v.(); if v != 0 goto label; v = v.; v = virtualinvoke v.(); v = virtualinvoke v.(); v = staticinvoke (v); interfaceinvoke v.(v); virtualinvoke v.(); goto label; label: v = staticinvoke (v); v = v.; v = interfaceinvoke v.(); if v == 0 goto label; v = ; if v != 0 goto label; v = virtualinvoke v.(); if v != 0 goto label; v = new java.lang.AssertionError; specialinvoke v.()>(); throw v; label: return 0; label: v = ; if v != 0 goto label; v = virtualinvoke v.(); if v > 0 goto label; v = new java.lang.AssertionError; specialinvoke v.()>(); throw v; label: specialinvoke v.(v, v); return 1; } private void sendTunneledTls(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString) { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$Builder v, v, v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString; v = staticinvoke (); v = ; v = virtualinvoke v.(v); v = virtualinvoke v.(v); v = virtualinvoke v.(); specialinvoke v.(v, v); return; } private void startAuthentication(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) throws javax.security.sasl.SaslException, org.apache.hive.kudu.org.apache.kudu.client.NonRecoverableException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase v; int[] v; int v, v; java.lang.AssertionError v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = ; v = v.; v = virtualinvoke v.(); v = v[v]; lookupswitch(v) { case 1: goto label; case 2: goto label; default: goto label; }; label: specialinvoke v.(v); goto label; label: specialinvoke v.(v); goto label; label: v = new java.lang.AssertionError; specialinvoke v.(java.lang.Object)>("unreachable"); throw v; label: return; } private void sendTokenExchange(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) { org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.util.concurrent.Future v, v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$Builder v, v, v; org.apache.hive.kudu.org.apache.kudu.security.Token$SignedTokenPB v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = v.; staticinvoke (v); v = v.; staticinvoke (v); v = v.; v = interfaceinvoke v.(); staticinvoke (v); v = staticinvoke (); v = ; v = virtualinvoke v.(v); v = v.; v = virtualinvoke v.(v); v = ; v. = v; v = virtualinvoke v.(); specialinvoke v.(v, v); return; } private void handleTokenExchangeResponse(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws javax.security.sasl.SaslException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v, v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = virtualinvoke v.(); v = ; if v != v goto label; v = 1; goto label; label: v = 0; label: v = virtualinvoke v.(); staticinvoke (v, "expected TOKEN_EXCHANGE, got step: {}", v); specialinvoke v.(v); return; } private void sendSaslInitiate(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) throws javax.security.sasl.SaslException, org.apache.hive.kudu.org.apache.kudu.client.NonRecoverableException { org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; byte[] v, v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$SaslMechanism$Builder v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$Builder v; javax.security.sasl.SaslClient v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v; java.lang.String v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslMechanism v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = staticinvoke (); v = v.; v = interfaceinvoke v.(); if v == 0 goto label; v = newarray (byte)[0]; v = specialinvoke v.(v); v = staticinvoke (v); virtualinvoke v.(v); label: v = ; virtualinvoke v.(v); v = virtualinvoke v.(); v = v.; v = virtualinvoke v.(); virtualinvoke v.(v); v = ; v. = v; v = virtualinvoke v.(); specialinvoke v.(v, v); return; } private void handleChallengeResponse(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws javax.security.sasl.SaslException, org.apache.hive.kudu.org.apache.kudu.client.NonRecoverableException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v, v; byte[] v, v; java.lang.IllegalStateException v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$NegotiateStep v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB$Builder v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = virtualinvoke v.(); v = virtualinvoke v.(); v = specialinvoke v.(v); if v != null goto label; v = new java.lang.IllegalStateException; specialinvoke v.(java.lang.String)>("Not expecting an empty token"); throw v; label: v = staticinvoke (); v = staticinvoke (v); virtualinvoke v.(v); v = ; virtualinvoke v.(v); v = virtualinvoke v.(); specialinvoke v.(v, v); return; } private void verifyChannelBindings(org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws java.io.IOException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; byte[] v, v, v; javax.security.sasl.SaslClient v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v; int v, v, v; boolean v, v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; java.security.cert.Certificate v; javax.net.ssl.SSLPeerUnverifiedException v, v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = v.; v = staticinvoke (v); v = virtualinvoke v.(); if v != 0 goto label; v = new javax.net.ssl.SSLPeerUnverifiedException; specialinvoke v.(java.lang.String)>("no channel bindings provided by remote peer"); throw v; label: v = virtualinvoke v.(); v = virtualinvoke v.(); v = lengthof v; if v >= 4 goto label; v = new javax.net.ssl.SSLPeerUnverifiedException; specialinvoke v.(java.lang.String)>("invalid too-short channel bindings"); throw v; label: v = v.; v = lengthof v; v = v - 4; v = interfaceinvoke v.(v, 4, v); v = staticinvoke (v, v); if v != 0 goto label; v = new javax.net.ssl.SSLPeerUnverifiedException; specialinvoke v.(java.lang.String)>("invalid channel bindings provided by remote peer"); throw v; label: return; } private void handleSuccessResponse(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext, org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB) throws java.io.IOException { org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB v; byte[] v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; javax.security.sasl.SaslClient v; java.security.cert.Certificate v; org.apache.hive.kudu.org.apache.kudu.shaded.com.google.protobuf.ByteString v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslMechanism v, v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; boolean v, v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v := @parameter: org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$NegotiatePB; v = v.; v = interfaceinvoke v.(); staticinvoke (v, "server sent SASL_SUCCESS step, but SASL negotiation is not complete"); v = v.; v = ; if v != v goto label; v = virtualinvoke v.(); if v == 0 goto label; v = virtualinvoke v.(); v = virtualinvoke v.(); v. = v; label: v = v.; if v == null goto label; specialinvoke v.(v); label: specialinvoke v.(v); return; } private void finish(org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext) throws javax.security.sasl.SaslException { org.apache.hive.kudu.org.apache.kudu.client.Negotiator$State v; java.lang.Object[] v; org.slf4j.Logger v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.Channel v; java.util.Set v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator v; org.apache.hive.kudu.org.apache.kudu.rpc.RpcHeader$AuthenticationTypePB$TypeCase v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelPromise v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelPipeline v; org.apache.hive.kudu.org.apache.kudu.client.RpcOutboundMessage v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$SaslMechanism v; org.apache.hive.kudu.org.apache.kudu.client.Negotiator$Success v; org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext v; v := @this: org.apache.hive.kudu.org.apache.kudu.client.Negotiator; v := @parameter: org.apache.hive.kudu.org.apache.kudu.shaded.io.netty.channel.ChannelHandlerContext; v = ; v. = v; v = interfaceinvoke v.(); interfaceinvoke v.(v); v = specialinvoke v.(); v = interfaceinvoke v.(); interfaceinvoke v.(v, v); v = ; v = newarray (java.lang.Object)[3]; v = interfaceinvoke v.(); v[0] = v; v = v.; v[1] = v; v = v.; v[2] = v; interfaceinvoke v.("Authenticated connection {} using {}/{}", v); v = new org.apache.hive.kudu.org.apache.kudu.client.Negotiator$Success; v = v.; specialinvoke v.(java.util.Set)>(v); interfaceinvoke v.