class HTTParty::ConnectionAdapter

def self.call(uri, options)
  new(uri, options).connection
end

def attach_ssl_certificates(http, options)
  if http.use_ssl?
    if options.fetch(:verify, true)
      http.verify_mode = OpenSSL::SSL::VERIFY_PEER
      if options[:cert_store]
        http.cert_store = options[:cert_store]
      else
        # Use the default cert store by default, i.e. system ca certs
        http.cert_store = OpenSSL::X509::Store.new
        http.cert_store.set_default_paths
      end
    else
      http.verify_mode = OpenSSL::SSL::VERIFY_NONE
    end
    # Client certificate authentication
    # Note: options[:pem] must contain the content of a PEM file having the private key appended
    if options[:pem]
      http.cert = OpenSSL::X509::Certificate.new(options[:pem])
      http.key = OpenSSL::PKey::RSA.new(options[:pem], options[:pem_password])
      http.verify_mode = verify_ssl_certificate? ? OpenSSL::SSL::VERIFY_PEER : OpenSSL::SSL::VERIFY_NONE
    end
    # PKCS12 client certificate authentication
    if options[:p12]
      p12 = OpenSSL::PKCS12.new(options[:p12], options[:p12_password])
      http.cert = p12.certificate
      http.key = p12.key
      http.verify_mode = verify_ssl_certificate? ? OpenSSL::SSL::VERIFY_PEER : OpenSSL::SSL::VERIFY_NONE
    end
    # SSL certificate authority file and/or directory
    if options[:ssl_ca_file]
      http.ca_file = options[:ssl_ca_file]
      http.verify_mode = OpenSSL::SSL::VERIFY_PEER
    end
    if options[:ssl_ca_path]
      http.ca_path = options[:ssl_ca_path]
      http.verify_mode = OpenSSL::SSL::VERIFY_PEER
    end
    # This is only Ruby 1.9+
    if options[:ssl_version] && http.respond_to?(:ssl_version=)
      http.ssl_version = options[:ssl_version]
    end
  end
end

def clean_host(host)
  strip_ipv6_brackets(host)
end

def connection
  host = clean_host(uri.host)
  port = uri.port || (uri.scheme == 'https' ? 443 : 80)
  if options.key?(:http_proxyaddr)
    http = Net::HTTP.new(host, port, options[:http_proxyaddr], options[:http_proxyport], options[:http_proxyuser], options[:http_proxypass])
  else
    http = Net::HTTP.new(host, port)
  end
  http.use_ssl = ssl_implied?(uri)
  attach_ssl_certificates(http, options)
  if options[:timeout] && (options[:timeout].is_a?(Integer) || options[:timeout].is_a?(Float))
    http.open_timeout = options[:timeout]
    http.read_timeout = options[:timeout]
  end
  if options[:read_timeout] && (options[:read_timeout].is_a?(Integer) || options[:read_timeout].is_a?(Float))
    http.read_timeout = options[:read_timeout]
  end
  if options[:open_timeout] && (options[:open_timeout].is_a?(Integer) || options[:open_timeout].is_a?(Float))
    http.open_timeout = options[:open_timeout]
  end
  if options[:debug_output]
    http.set_debug_output(options[:debug_output])
  end
  if options[:ciphers]
    http.ciphers = options[:ciphers]
  end
  # Bind to a specific local address or port
  #
  # @see https://bugs.ruby-lang.org/issues/6617
  if options[:local_host]
    if RUBY_VERSION >= "2.0.0"
      http.local_host = options[:local_host]
    else
      Kernel.warn("Warning: option :local_host requires Ruby version 2.0 or later")
    end
  end
  if options[:local_port]
    if RUBY_VERSION >= "2.0.0"
      http.local_port = options[:local_port]
    else
      Kernel.warn("Warning: option :local_port requires Ruby version 2.0 or later")
    end
  end
  http
end

def initialize(uri, options = {})
  uri_adapter = options[:uri_adapter] || URI
  raise ArgumentError, "uri must be a #{uri_adapter}, not a #{uri.class}" unless uri.is_a? uri_adapter
  @uri = uri
  @options = OPTION_DEFAULTS.merge(options)
end

def ssl_implied?(uri)
  uri.port == 443 || uri.scheme == 'https'
end

def strip_ipv6_brackets(host)
  StripIpv6BracketsRegex =~ host ? $1 : host
end

def verify_ssl_certificate?
  !(options[:verify] == false || options[:verify_peer] == false)
end