#!/bin/bash
#
# VERSION=1
# CHANGES=init

source /usr/fallback/helper

case ${1} in
	start)
		echo "[init_cacerts] Starting"
		cronUpdate "${1}" "renew-ca" "0 5 1 * * /usr/fallback/cloud renew-ca"
		if [ ! -f /usr/conf/tls/certs/ca-certs.crt ]; then
			mkdir -p /usr/conf/tls/certs
			/usr/fallback/cloud renew-ca
		fi
		[ ! -z "$(cat /usr/conf/tls/certs/ca-certs.crt | grep CERTIFICATE)" ] && /usr/fallback/beroconf delete root openssl-ca-missing
		if [ ! "$(/usr/fallback/beroconf get root openssl-ca-missing | grep -v failed)" = "" ]; then
			## CA certs missing. remove VERSION.ca-certs to be reinstalled
			mount -o remount,rw /
			rm -r /pkginfo/VERSION.ca-certs
			mount -o remount,ro /
		fi
		;;
	stop)
		echo "[init_cacerts] Stopping"
		cronUpdate "${1}" "renew-ca"
		;;
	restart)
		${0} stop
		${0} start
		;;
	*)
		echo "Usage: ${0} [start|stop|restart]"
		exit 1
		;;
esac

exit 0
