# Maintainer: Erich Eckner <arch at eckner dot net>

pkgname='local-certificates'
arch=('any')
pkgver=2024.05.07.16.15.17
pkgrel=1
pkgdesc='Certificate for local version of https://arch.eckner.net'
license=('GPL-2.0-or-later')
install='local-certificates.install'
url='https://eckner.net/certs'

source=(
  'https://eckner.net/certs/2020-05-31T20:30:22.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2020-11-30T23:50:55.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2021-05-26T20:27:31.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2021-11-04T19:08:05.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2022-04-09T09:29:04.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2022-10-08T12:52:38.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2023-03-22T20:18:22.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2023-08-30T19:27:53.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2024-02-01T21:08:34.opennic_root_ca.crt'
  'https://eckner.net/certs/2024-05-06T05:22:29.root-ca.old.crt'
  'https://eckner.net/certs/2024-05-07T16:15:17.root-ca.crt'
)
sha512sums=('05599a55243839294d6f158193b8f124a6e8db0394dbf03b67978251c7dfb989373ae5b1de532db8d345da573c484bcf1b18a5d51ec7173fad1b1e98a8c414f7'
            'eb6c517ba5a7e5e30bc7e64cc241af93497aa95419d199d611608777e8ac2302b574c89854cd9f293862bd7fa9ea920a248461d9ef8690a96d8da2346b65f87e'
            'ae16c1aab7a88dbfb6982ed54b6dc0878f4204e5b9d501757c305d46aa752ab1ee936ce8c6941a6249fffa8f5d32b22abd1ca397bcc3e083964b5299dbfe8ca6'
            'f793b5d0cb66b8a3d1d181867b3d9592886941018cd9c0d5c2ea0945d7af0394cd98ad28b48bd3275166bdc11c0715ea05a5671a33562cc965cd9972bfc40ec1'
            '3351b0ff53e2c2643d176a0d629246c3b6dd1a2dc1e5511df9f2eff68e2b4fa49f6517bf67a689383fc83d139019760047ce6a8d865dcae68a4b9807084b27db'
            '2973f7e282d0a2be3912429846328a48a7e06a6e81606cb506a59444b8eafe08e49c55f0e8b8785f8d7c1e431be53d96941bbc549a3eceaafaad4d11b841e240'
            'aff29804fdc9f4d9c08b5918eb22ed296708770359820daedb11b2fca6b0be77eff614c59d4be9c05506bf843cfa116f4a8765b17b542e76d005da5b266494e8'
            'ab95c7fb64178f61be21ca839141a3477b34d378bac5890a6bdd0e7f7412cb5ee3ba8d643ad918be0932e5a44b308d47bb20ea941e62402d35ea4eabb9932b99'
            'aff29804fdc9f4d9c08b5918eb22ed296708770359820daedb11b2fca6b0be77eff614c59d4be9c05506bf843cfa116f4a8765b17b542e76d005da5b266494e8'
            'c5d2d75b78da86fcd29f600edf362f3b3da4e9cb9334d5dbbd047d5719addcaab1631024d5570e1cb627205150bfee492cf11be331005876630a0543c6a17d03'
            'ef5aa96ec1996b51ddf78c77a19b1c7e6bf8578390a213abf9eebdfc78e88d29e6547f4db4f77c0f9a4550df24dc32b79e567d797fe19470baf9292790580d68')

package() {
  cd "${srcdir}"
  install -d "${pkgdir}/usr/share/ca-certificates/trust-source/anchors"
  for s in *{,.old}.cert.pem *{,.old}.crt; do
    [ -f "$s" ] || continue
    if [ $(date -d"$(openssl x509 -noout -enddate -in "$s" | cut -d= -f2)" +%s) -lt $(($(date +%s)-24*60*60*7)) ]; then
      continue
    fi
    t="${pkgdir}/usr/share/ca-certificates/trust-source/anchors/${s#????-??-??T??:??:??.}"
    if [ -f "${t}" ]; then
      t="${t%.crt}.2.crt"
    fi
    while [ -f "${t}" ]; do
      t="${t%.crt}"
      t="${t%.*}.$((${t##*.}+1)).crt"
    done
    install "${s}" "${t}"
  done
}