Add custom QZ Tray fork with pairing key authentication

- Custom fork of QZ Tray 2.2.x with certificate validation bypassed
- Implemented pairing key (HMAC) authentication as replacement
- Modified files: PrintSocketClient.java (certificate check disabled)
- New files: PairingAuth.java, PairingConfigDialog.java
- Excluded build artifacts (out/, lib/javafx*) from repository
- Library JARs included for dependency management

tray/src/qz/auth/RequestState.java

@@ -0,0 +1,118 @@
+package qz.auth;
+
+import org.codehaus.jettison.json.JSONObject;
+import qz.common.Constants;
+
+import java.time.Instant;
+import java.util.Arrays;
+
+public class RequestState {
+
+    public enum Validity {
+        TRUSTED("Valid"),
+        EXPIRED("Expired Signature"),
+        UNSIGNED("Invalid Signature"),
+        EXPIRED_CERT("Expired Certificate"),
+        FUTURE_CERT("Future Certificate"),
+        INVALID_CERT("Invalid Certificate"),
+        UNKNOWN("Invalid");
+
+        private String formatted;
+
+        Validity(String formatted) {
+            this.formatted = formatted;
+        }
+
+        public String getFormatted() {
+            return formatted;
+        }
+    }
+
+    Certificate certUsed;
+    JSONObject requestData;
+
+    boolean initialConnect;
+    Validity status;
+
+    public RequestState(Certificate cert, JSONObject data) {
+        certUsed = cert;
+        requestData = data;
+        status = Validity.UNKNOWN;
+    }
+
+    public Certificate getCertUsed() {
+        return certUsed;
+    }
+
+    public JSONObject getRequestData() {
+        return requestData;
+    }
+
+    public boolean isInitialConnect() {
+        return initialConnect;
+    }
+
+    public void markNewConnection(Certificate cert) {
+        certUsed = cert;
+        initialConnect = true;
+
+        checkCertificateState(cert);
+    }
+
+    public void checkCertificateState(Certificate cert) {
+        if (cert.isTrusted()) {
+            status = Validity.TRUSTED;
+        } else if (cert.getValidToDate().isBefore(Instant.now())) {
+            status = Validity.EXPIRED_CERT;
+        } else if (cert.getValidFromDate().isAfter(Instant.now())) {
+            status = Validity.FUTURE_CERT;
+        } else if (!cert.isValid()) {
+            status = Validity.INVALID_CERT;
+        } else {
+            status = Validity.UNKNOWN;
+        }
+    }
+
+    public Validity getStatus() {
+        return status;
+    }
+
+    public void setStatus(Validity state) {
+        status = state;
+    }
+
+    public boolean hasCertificate() {
+        return certUsed != null && certUsed != Certificate.UNKNOWN;
+    }
+
+    public boolean hasSavedCert() {
+        return isVerified() && certUsed.isSaved();
+    }
+
+    public boolean hasBlockedCert() {
+        return certUsed == null || certUsed.isBlocked();
+    }
+
+    public String getCertName() {
+        return certUsed.getCommonName();
+    }
+
+    public boolean isVerified() {
+        return certUsed.isTrusted() && status == Validity.TRUSTED;
+    }
+
+    public boolean isSponsored() {
+        return certUsed.isSponsored();
+    }
+
+    public String getValidityInfo() {
+        if (status == Validity.TRUSTED) {
+            return Constants.TRUSTED_CERT;
+        } else if (Arrays.asList(Validity.UNSIGNED, Validity.EXPIRED, Validity.EXPIRED_CERT, Validity.FUTURE_CERT).contains(status)) {
+            return Constants.NO_TRUST + " - " + status.getFormatted();
+        } else {
+            return Constants.UNTRUSTED_CERT;
+        }
+    }
+
+}