# Maintainer: Erich Eckner <arch at eckner dot net>

pkgname='local-certificates'
arch=('any')
pkgver=2024.03.07.05.12.53
pkgrel=3
pkgdesc='Certificate for local version of https://arch.eckner.net'
license=('GPL')
install='local-certificates.install'
url='https://eckner.net/certs'

source=(
  'https://eckner.net/certs/2020-05-31T20:30:22.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2020-11-30T23:50:55.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2021-05-26T20:27:31.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2021-11-04T19:08:05.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2022-04-09T09:29:04.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2022-10-08T12:52:38.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2023-03-22T20:18:22.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2023-08-30T19:27:53.opennic_root_ca.old.crt'
  'https://eckner.net/certs/2024-02-01T21:08:34.opennic_root_ca.crt'
  'https://eckner.net/certs/2024-01-05T20:06:56.root-ca.old.crt'
  'https://eckner.net/certs/2024-03-06T19:59:34.root-ca.old.crt'
  'https://eckner.net/certs/2024-03-07T05:12:53.root-ca.crt'
)
sha512sums=(
  '05599a55243839294d6f158193b8f124a6e8db0394dbf03b67978251c7dfb989373ae5b1de532db8d345da573c484bcf1b18a5d51ec7173fad1b1e98a8c414f7'
  'eb6c517ba5a7e5e30bc7e64cc241af93497aa95419d199d611608777e8ac2302b574c89854cd9f293862bd7fa9ea920a248461d9ef8690a96d8da2346b65f87e'
  'ae16c1aab7a88dbfb6982ed54b6dc0878f4204e5b9d501757c305d46aa752ab1ee936ce8c6941a6249fffa8f5d32b22abd1ca397bcc3e083964b5299dbfe8ca6'
  'f793b5d0cb66b8a3d1d181867b3d9592886941018cd9c0d5c2ea0945d7af0394cd98ad28b48bd3275166bdc11c0715ea05a5671a33562cc965cd9972bfc40ec1'
  '3351b0ff53e2c2643d176a0d629246c3b6dd1a2dc1e5511df9f2eff68e2b4fa49f6517bf67a689383fc83d139019760047ce6a8d865dcae68a4b9807084b27db'
  '2973f7e282d0a2be3912429846328a48a7e06a6e81606cb506a59444b8eafe08e49c55f0e8b8785f8d7c1e431be53d96941bbc549a3eceaafaad4d11b841e240'
  '1ecd6c459022b8f8111f8acf1599fc1767614640c06917ea3e2903384e73011eb95b19cedb10ae029a97b5e747aafff86c8bc8f5ab23de79e7a284bc5e096ce1'
  'ab95c7fb64178f61be21ca839141a3477b34d378bac5890a6bdd0e7f7412cb5ee3ba8d643ad918be0932e5a44b308d47bb20ea941e62402d35ea4eabb9932b99'
  'aff29804fdc9f4d9c08b5918eb22ed296708770359820daedb11b2fca6b0be77eff614c59d4be9c05506bf843cfa116f4a8765b17b542e76d005da5b266494e8'
  '08c34510ea7f34d1efc72124e38410be747f9c3941458a79fe6bfbb61f9e00849661aecfa34bb56d14ca6f1dba8c77d8802fd6810f88c576fe74b24efb439330'
  'b3dfe110465d3a575343476da490fc76eede1f5507b4d0359f80a432003e2990aed028e1032dc095ea00fbb8e1cabb1a253d7a045c2cbbcf5681f8cfcc4877e2'
  '273423a11e86286fbfb0b0992d1ed2e3b1796bb6b29073a35c97ba8e5fd2eba0107e755234b20c89ec82c4c0cbe0b65248c63e32d0efa8e916f3761ab1142877'
)

package() {
  cd "${srcdir}"
  install -d "${pkgdir}/usr/share/ca-certificates/trust-source/anchors"
  for s in *{,.old}.cert.pem *{,.old}.crt; do
    [ -f "$s" ] || continue
    if [ $(date -d"$(openssl x509 -noout -enddate -in "$s" | cut -d= -f2)" +%s) -lt $(($(date +%s)-24*60*60*7)) ]; then
      continue
    fi
    t="${pkgdir}/usr/share/ca-certificates/trust-source/anchors/${s#????-??-??T??:??:??.}"
    if [ -f "${t}" ]; then
      t="${t%.crt}.2.crt"
    fi
    while [ -f "${t}" ]; do
      t="${t%.crt}"
      t="${t%.*}.$((${t##*.}+1)).crt"
    done
    install "${s}" "${t}"
  done
}