#!/bin/sh -e

LOG_FILE="/var/log/auto-update-gov-certificates.log"
echo "$(date "+%FT%T") Start auto upgrade Gov Certificates..." >> "$LOG_FILE"

. /usr/local/bin/project_env.sh

SIM_DIR="/etc/ssl/itaca"
touch "$LOG_FILE"
TMP_CERT_PATH=`mktemp -d`

echo "$(date "+%FT%T") Remove temporary certificates file from $TMP_CERT_PATH" >> "$LOG_FILE"
rm -Rf "$TMP_CERT_PATH"/* >> "$LOG_FILE" 2>&1

echo "$(date "+%FT%T") Downloading Gov Certificates in tmp path $TMP_CERT_PATH..." >> "$LOG_FILE"
/usr/local/bin/parse-gov-certs.py --output-folder "$TMP_CERT_PATH" --service-type-identifier "$GOV_TRUST_CERTS_SERVICE_TYPE_IDENTIFIER" >> "$LOG_FILE" 2>&1
echo "$(date "+%FT%T") Downloading Gov Certificates...[END]" >> "$LOG_FILE"

echo "$(date "+%FT%T") Save Gov Certificates into $GOV_TRUST_CERTS_OUTPUT_PATH" >> "$LOG_FILE"
mkdir -p "$GOV_TRUST_CERTS_OUTPUT_PATH" >> "$LOG_FILE" 2>&1
rm -Rf "$GOV_TRUST_CERTS_OUTPUT_PATH"/* >> "$LOG_FILE" 2>&1
mv "$TMP_CERT_PATH"/* "$GOV_TRUST_CERTS_OUTPUT_PATH" >> "$LOG_FILE" 2>&1
rm -Rf "$TMP_CERT_PATH" >> "$LOG_FILE" 2>&1

echo "$(date "+%FT%T") Removing simlinks from $SIM_DIR ..." >> "$LOG_FILE"
mkdir -p "$SIM_DIR" >> "$LOG_FILE" 2>&1
rm -Rf "$SIM_DIR"/* >> "$LOG_FILE" 2>&1

echo "$(date "+%FT%T") Creating simlinks into $SIM_DIR/" >> "$LOG_FILE"
find "$GOV_TRUST_CERTS_OUTPUT_PATH" -type f | xargs -I{} basename "{}" | xargs -I{} ln -s "$GOV_TRUST_CERTS_OUTPUT_PATH/{}" "$SIM_DIR/{}" >> "$LOG_FILE" 2>&1

echo "$(date "+%FT%T") Re-Hashing $SIM_DIR/..." >> "$LOG_FILE"
c_rehash "$SIM_DIR/" >> "$LOG_FILE" 2>&1

echo "$(date "+%FT%T") Start auto upgrade Gov Certificates...[END]" >> "$LOG_FILE"

echo "$(date "+%FT%T") Restart Apache HTTP Service..." >> "$LOG_FILE"
systemctl restart apache2 >> "$LOG_FILE" 2>&1
echo "$(date "+%FT%T") End auto upgrade Gov Certificates..." >> "$LOG_FILE"