# Maintainer: Erich Eckner <arch at eckner dot net>

pkgname='local-certificates'
arch=('any')
pkgver=2024.07.09.15.25.06
pkgrel=1
pkgdesc='Certificate for local version of https://arch.eckner.net'
license=('GPL-2.0-or-later')
install='local-certificates.install'
url='https://eckner.net/certs'

source=(
  'https://eckner.net/certs/2020-05-31T20:30:22.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2020-11-30T23:50:55.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2021-05-26T20:27:31.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2021-11-04T19:08:05.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2022-04-09T09:29:04.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2022-10-08T12:52:38.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2023-08-30T19:27:53.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2024-02-01T21:08:34.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2024-07-05T16:48:22.root-ca.old.crt'
  'https://eckner.net/certs/2024-07-07T11:24:38.root-ca.crt'
  'https://eckner.net/certs/2024-07-09T15:25:06.opennic_root_ca.crt'
)
sha512sums=(
  '05599a55243839294d6f158193b8f124a6e8db0394dbf03b67978251c7dfb989373ae5b1de532db8d345da573c484bcf1b18a5d51ec7173fad1b1e98a8c414f7'
  'eb6c517ba5a7e5e30bc7e64cc241af93497aa95419d199d611608777e8ac2302b574c89854cd9f293862bd7fa9ea920a248461d9ef8690a96d8da2346b65f87e'
  'ae16c1aab7a88dbfb6982ed54b6dc0878f4204e5b9d501757c305d46aa752ab1ee936ce8c6941a6249fffa8f5d32b22abd1ca397bcc3e083964b5299dbfe8ca6'
  'f793b5d0cb66b8a3d1d181867b3d9592886941018cd9c0d5c2ea0945d7af0394cd98ad28b48bd3275166bdc11c0715ea05a5671a33562cc965cd9972bfc40ec1'
  '3351b0ff53e2c2643d176a0d629246c3b6dd1a2dc1e5511df9f2eff68e2b4fa49f6517bf67a689383fc83d139019760047ce6a8d865dcae68a4b9807084b27db'
  '2973f7e282d0a2be3912429846328a48a7e06a6e81606cb506a59444b8eafe08e49c55f0e8b8785f8d7c1e431be53d96941bbc549a3eceaafaad4d11b841e240'
  'ab95c7fb64178f61be21ca839141a3477b34d378bac5890a6bdd0e7f7412cb5ee3ba8d643ad918be0932e5a44b308d47bb20ea941e62402d35ea4eabb9932b99'
  'aff29804fdc9f4d9c08b5918eb22ed296708770359820daedb11b2fca6b0be77eff614c59d4be9c05506bf843cfa116f4a8765b17b542e76d005da5b266494e8'
  '81013e755f0ce726075f342224a16f659b28920b17532f8c7582cd4b5ef1501c02edaaf74584537d49de5fd1a1d50f91d6788cf39d7c4b779c4cf9d44b677d33'
  '50c6be7da6d59e822c52d89abbb9cc458ff1d60e349000b2212637e68286460ca889c3797dfe49bce3e07f025b60f8cc5d0c3f41673941dd2b187ec50954ffae'
  '5664f4b6eb3bc60530186cb67639cbd6c1bc55d3714e1a40431140fd4e848d87facf933c8e84a5cdca7fc89f3f49ec50cdf59a36caf8059d61cda55d8f828144'
)

package() {
  cd "${srcdir}"
  install -d "${pkgdir}/usr/share/ca-certificates/trust-source/anchors"
  for s in *{,.old}.cert.pem *{,.old}.crt; do
    [ -f "$s" ] || continue
    if [ $(date -d"$(openssl x509 -noout -enddate -in "$s" | cut -d= -f2)" +%s) -lt $(($(date +%s)-24*60*60*7)) ]; then
      continue
    fi
    t="${pkgdir}/usr/share/ca-certificates/trust-source/anchors/${s#????-??-??T??:??:??.}"
    if [ -f "${t}" ]; then
      t="${t%.crt}.2.crt"
    fi
    while [ -f "${t}" ]; do
      t="${t%.crt}"
      t="${t%.*}.$((${t##*.}+1)).crt"
    done
    install "${s}" "${t}"
  done
}