#!/bin/sh -x

PKI_SRC=`cd ../.. ; pwd`/pki

INSTANCE_NAME=pki-kra

pkicreate -pki_instance_root=/var/lib			\
          -pki_instance_name=$INSTANCE_NAME		\
          -subsystem_type=kra				\
          -secure_port=10443				\
          -unsecure_port=10180				\
          -tomcat_server_port=10701			\
          -user=pkiuser					\
          -group=pkiuser				\
          -audit_group=pkiaudit				\
          -redirect conf=/etc/$INSTANCE_NAME		\
          -redirect logs=/var/log/$INSTANCE_NAME	\
          -verbose

ln -s /usr/share/tomcat6/bin /var/lib/$INSTANCE_NAME/bin
ln -s /usr/share/tomcat6/lib /var/lib/$INSTANCE_NAME/lib
rm -f /var/lib/$INSTANCE_NAME/webapps/kra/WEB-INF/lib/pki-*
ln -s $PKI_SRC/pki/build/classes /var/lib/$INSTANCE_NAME/webapps/kra/WEB-INF/classes

systemctl restart pki-krad@$INSTANCE_NAME.service