# shellcheck shell=bash
# ==========================================================================
#         ____            _                     _____           _
#        / ___| _   _ ___| |_ ___ _ __ ___     |_   _|__   ___ | |___
#        \___ \| | | / __| __/ _ \ '_ ` _ \ _____| |/ _ \ / _ \| / __|
#         ___) | |_| \__ \ ||  __/ | | | | |_____| | (_) | (_) | \__ \
#        |____/ \__, |___/\__\___|_| |_| |_|     |_|\___/ \___/|_|___/
#               |___/
#                             --- System-Tools ---
#                  https://www.nntb.no/~dreibh/system-tools/
# ==========================================================================
#
# TLS Connection Tester
# Copyright (C) 2015-2026 by Thomas Dreibholz
#
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#
# Contact: thomas.dreibholz@gmail.com


# ###### Bash completion for test-tls-connection ###############################
_test_tls_connection()
{
   # Based on: https://www.benningtons.net/index.php/bash-completion/
   local cur prev words cword
   if type -t _comp_initialize >/dev/null; then
      _comp_initialize || return
   elif type -t _init_completion >/dev/null; then
      _init_completion || return
   else
      # Manual initialization for older bash completion versions:
      COMPREPLY=()
      cur="${COMP_WORDS[COMP_CWORD]}"
      # shellcheck disable=SC2034
      prev="${COMP_WORDS[COMP_CWORD-1]}"
      # shellcheck disable=SC2034,SC2124
      words="${COMP_WORDS[@]}"
      # shellcheck disable=SC2034
      cword="${COMP_CWORD}"
   fi

   # ====== Handle the ":" in host:port =====================================
   local real_cword=0
   local i=1
   while [ $i -le "${COMP_CWORD}" ] ; do
      if [[ "${COMP_WORDS[i]}" == ":" ]] ; then
         true   # Ignore a colon
      elif [ $i -gt 1 ] && [[ "${COMP_WORDS[i-1]}" == ":" ]] && [[ "${COMP_WORDS[i]}" != "" ]] ; then
         true    # Ignore text after the colon
      else
         real_cword=$((real_cword + 1))   # New word
      fi
      i=$((i + 1))
   done

   if [[ "${cur}" != -* ]] ; then
      # ====== Suggest hostname:port ========================================
      if [ "${real_cword}" -eq 1 ] ; then
         local hostname
         hostname="$(hostname -f 2>/dev/null || echo "localhost")"
         mapfile -t COMPREPLY < <(compgen -W "${hostname}:443 www.heise.de:443 www.ietf.org:443 www.nntb.no:443 www.simula.no:443" -- "${cur}")
         # NOTE: Block before colon may be duplicated -> need to truncate:
         if [[ ${cur} == *:* ]] ; then
            __ltrim_colon_completions "${cur}"
         fi
         return
      # ====== Suggest CA certificate file ==================================
      elif [ "${real_cword}" -eq 2 ] ; then
         _filedir '@(cert|crt|pem)'
         return
      fi
   fi

   case "${prev}" in
      #  ====== Special case: certificate file ==============================
      -s | --save-certificate)
         _filedir '@(crt|cert|pem)'
         return
         ;;
   esac

   # ====== All options =====================================================
   local opts="
-s
--save-certificate
-n
--no-view-certificate
-c
--no-check-certificate
-h
--help
-v
--version
"
   mapfile -t COMPREPLY < <(compgen -W "${opts}" -- "${cur}" )
   return 0
}

complete -F _test_tls_connection test-tls-connection
