setup_certs

#!/usr/bin/env bash

set -e

addon="$1"

[ -z $addon ] && {
  echo "addon is missing" >&2
  exit 1
}

client_key="$(echo $addon)_CLIENT_CERT_KEY"
client_cert="$(echo $addon)_CLIENT_CERT"
trusted_cert="$(echo $addon)_TRUSTED_CERT"

[ -z $TRUSTSTORE_PASSWORD ] && {
  echo "TRUSTSTORE_PASSWORD is missing" >&2
  exit 1
}

[ -z $KEYSTORE_PASSWORD ] && {
  echo "KEYSTORE_PASSWORD is missing" >&2
  exit 1
}

rm -f .{keystore,truststore}.{pem,pkcs12,jks}
rm -f .cacerts

#cp /etc/ssl/certs/java/cacerts ./.cacerts

echo -n "${!client_key}" >> .keystore.pem
echo -n "${!client_cert}" >> .keystore.pem
echo -n "${!trusted_cert}" > .truststore.pem

keytool -importcert -file .truststore.pem -keystore .truststore.jks -deststorepass $TRUSTSTORE_PASSWORD -noprompt

openssl pkcs12 -export -in .keystore.pem -out .keystore.pkcs12 -password pass:$KEYSTORE_PASSWORD
keytool -importkeystore -srcstoretype PKCS12 \
    -destkeystore .keystore.jks -deststorepass $KEYSTORE_PASSWORD \
    -srckeystore .keystore.pkcs12 -srcstorepass $KEYSTORE_PASSWORD

rm -f .{keystore,truststore}.{pem,pkcs12}