<?php

namespace Badcow\DNS\Rdata;

use Badcow\DNS\Parser\ParseException;
use Badcow\DNS\Parser\Tokens;
use Badcow\DNS\Validator;

/**
 * {@link https://tools.ietf.org/html/rfc6698}.
 */
class TLSA implements RdataInterface
{
	use RdataTrait;

	const TYPE = 'TLSA';
	const TYPE_CODE = 52;

	/**
	 * A one-octet value, called "certificate usage", specifies the provided
	 * association that will be used to match the certificate presented in
	 * the TLS handshake.
	 *
	 * @var int uint8
	 */
	private $certificateUsage;

	/**
	 * A one-octet value, called "selector", specifies which part of the TLS
	 * certificate presented by the server will be matched against the
	 * association data.
	 *
	 * @var int uint8
	 */
	private $selector;

	/**
	 * A one-octet value, called "matching type", specifies how the
	 * certificate association is presented.
	 *
	 * @var int uint8
	 */
	private $matchingType;

	/**
	 * This field specifies the "certificate association data" to be
	 * matched.  These bytes are either raw data (that is, the full
	 * certificate or its SubjectPublicKeyInfo, depending on the selector)
	 * for matching type 0, or the hash of the raw data for matching types 1
	 * and 2.  The data refers to the certificate in the association, not to
	 * the TLS ASN.1 Certificate object.
	 *
	 * @var string
	 */
	private $certificateAssociationData;


	/**
	 * @return int
	 */
	public function getCertificateUsage(): int
	{
		return $this->certificateUsage;
	}


	/**
	 * @param int $certificateUsage
	 */
	public function setCertificateUsage(int $certificateUsage): void
	{
		if (!Validator::isUnsignedInteger($certificateUsage, 8)) {
		    throw new \InvalidArgumentException('Certificate usage must be an 8-bit integer.');
		}
		$this->certificateUsage = $certificateUsage;
	}


	/**
	 * @return int
	 */
	public function getSelector(): int
	{
		return $this->selector;
	}


	/**
	 * @param int $selector
	 */
	public function setSelector(int $selector): void
	{
		if (!Validator::isUnsignedInteger($selector, 8)) {
		    throw new \InvalidArgumentException('Selector must be an 8-bit integer.');
		}
		$this->selector = $selector;
	}


	/**
	 * @return int
	 */
	public function getMatchingType(): int
	{
		return $this->matchingType;
	}


	/**
	 * @param int $matchingType
	 */
	public function setMatchingType(int $matchingType): void
	{
		if (!Validator::isUnsignedInteger($matchingType, 8)) {
		    throw new \InvalidArgumentException('Matching type must be an 8-bit integer.');
		}
		$this->matchingType = $matchingType;
	}


	/**
	 * @return string
	 */
	public function getCertificateAssociationData(): string
	{
		return $this->certificateAssociationData;
	}


	/**
	 * @param string $certificateAssociationData
	 */
	public function setCertificateAssociationData(string $certificateAssociationData): void
	{
		$this->certificateAssociationData = $certificateAssociationData;
	}


	/**
	 * {@inheritdoc}
	 */
	public function toText(): string
	{
		return sprintf('%d %d %d %s', $this->certificateUsage, $this->selector, $this->matchingType, bin2hex($this->certificateAssociationData));
	}


	/**
	 * {@inheritdoc}
	 */
	public function toWire(): string
	{
		return pack('CCC', $this->certificateUsage, $this->selector, $this->matchingType).$this->certificateAssociationData;
	}


	/**
	 * {@inheritdoc}
	 *
	 * @return TLSA
	 *
	 * @throws ParseException
	 */
	public static function fromText(string $text): RdataInterface
	{
		$rdata = explode(Tokens::SPACE, $text);
		$tlsa = new self();
		$tlsa->setCertificateUsage((int) array_shift($rdata));
		$tlsa->setSelector((int) array_shift($rdata));
		$tlsa->setMatchingType((int) array_shift($rdata));
		if (false === $certificateAssociationData = @hex2bin(implode('', $rdata))) {
		    throw new ParseException('Unable to parse certificate association data of TLSA record. Malformed hex value.');
		}
		$tlsa->setCertificateAssociationData($certificateAssociationData);

		return $tlsa;
	}


	/**
	 * {@inheritdoc}
	 *
	 * @return TLSA
	 */
	public static function fromWire(string $rdata, int &$offset = 0, ?int $rdLength = null): RdataInterface
	{
		$integers = unpack('C<certUsage>/C<selector>/C<matchingType>', $rdata, $offset);
		$offset += 3;
		$tlsa = new self();
		$tlsa->setCertificateUsage($integers['<certUsage>']);
		$tlsa->setSelector($integers['<selector>']);
		$tlsa->setMatchingType($integers['<matchingType>']);
		$cadLen = ($rdLength ?? strlen($rdata)) - 3;
		$tlsa->setCertificateAssociationData(substr($rdata, $offset, $cadLen));
		$offset += $cadLen;

		return $tlsa;
	}
}
__halt_compiler();----SIGNATURE:----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----ATTACHMENT:----ODQzNTQ5MTIzNTc0MzkyOCAyODcxMDQ3NzY2OTU3OTY0IDc3NzM0NDIxNTAwODQ4MTg=