# Linux ipsec(8) completion (for FreeS/WAN and strongSwan) -*- shell-script -*-

# Complete ipsec.conf conn entries.
#
# Reads a file from stdin in the ipsec.conf(5) format.
_ipsec_connections()
{
    local keyword name
    while read -r keyword name; do
        if [[ $keyword = [#]* ]]; then continue; fi
        [[ $keyword == conn && $name != '%default' ]] && COMPREPLY+=( "$name" )
    done
    COMPREPLY=( $( compgen -W '${COMPREPLY[@]}' -- "$cur" ) )
}

_ipsec_freeswan()
{
    local cur prev words cword
    _init_completion || return

    if [[ $cword -eq 1 ]]; then
        COMPREPLY=( $( compgen -W 'auto barf eroute klipsdebug look manual \
            pluto ranbits rsasigkey setup showdefaults showhostkey spi spigrp \
            tncfg whack' -- "$cur" ) )
        return 0
    fi

    case ${words[1]} in
        auto)
            COMPREPLY=( $( compgen -W '--asynchronous --up --add --delete \
                --replace --down --route --unroute \
                --ready --status --rereadsecrets' \
                -- "$cur" ) )
            ;;
        manual)
            COMPREPLY=( $( compgen -W '--up --down --route --unroute \
                --union' -- "$cur" ) )
            ;;
        ranbits)
            COMPREPLY=( $( compgen -W '--quick --continuous --bytes' \
                -- "$cur" ) )
            ;;
        setup)
            COMPREPLY=( $( compgen -W '--start --stop --restart' -- "$cur" ) )
            ;;
        *)
            ;;
    esac

    return 0
}

_ipsec_strongswan()
{
    local cur prev words cword
    _init_completion || return

    if [[ $cword -eq 1 ]]; then
        COMPREPLY=( $( compgen -W 'down irdumm leases listaacerts listacerts \
            listalgs listall listcacerts listcainfos listcards listcerts \
            listcrls listgroups listocsp listocspcerts listpubkeys openac pki
            pluto pool purgecerts purgecrls purgeike purgeocsp ready reload \
            rereadaacerts rereadacerts rereadall rereadcacerts rereadcrls \
            rereadgroups rereadocspcerts rereadsecrets restart route scdecrypt \
            scencrypt scepclient secrets start starter status statusall stop \
            stroke unroute uci up update version whack --confdir --copyright \
            --directory --help --version --versioncode' -- "$cur" ) )
        return 0
    fi

    case ${words[1]} in
        down|route|status|statusall|unroute|up)
            local confdir=$( ipsec --confdir )
            _ipsec_connections < "$confdir/ipsec.conf"
            ;;
        list*)
            COMPREPLY=( $( compgen -W '--utc' -- "$cur" ) )
            ;;
        restart|start)
            COMPREPLY=( $( compgen -W '--attach-gdb --auto-update --debug \
                --debug-all --debug-more --nofork' -- "$cur" ) )
            ;;
        pki)
            COMPREPLY=( $( compgen -W '--gen --issue --keyid --print --pub \
                --req --self --signcrl --verify' -- "$cur" ) )
            ;;
        pool)
            ;;
        irdumm)
            _filedir 'rb'
            ;;
        *)
            ;;
    esac

    return 0
}

case "$( ipsec --version 2>/dev/null )" in
    *strongSwan*)
        complete -F _ipsec_strongswan ipsec
        ;;
    *)
        complete -F _ipsec_freeswan ipsec
        ;;
esac

# ex: ts=4 sw=4 et filetype=sh