#!/bin/sh -x

SRC_DIR=`cd ../.. ; pwd`

INSTANCE_NAME=kra-master
SERVER_CERT_DIR=/var/lib/pki/$INSTANCE_NAME
CLIENT_CERT_DIR=/var/lib/pki/$INSTANCE_NAME/kra/certs
CERT_NAME="transportCert cert-$INSTANCE_NAME"

CLASSPATH=$SRC_DIR/pki/build/classes
CLASSPATH=$CLASSPATH:/usr/share/java/apache-commons-cli.jar
CLASSPATH=$CLASSPATH:/usr/lib64/java/jss4.jar
CLASSPATH=$CLASSPATH:/usr/share/java/commons-codec.jar

#echo Secret123 > $CLIENT_CERT_DIR/password.txt
#certutil -N -d $CLIENT_CERT_DIR -f $CLIENT_CERT_DIR/password.txt

# export transport certificate
certutil -L -d $SERVER_CERT_DIR/alias -n "$CERT_NAME" -a > $CLIENT_CERT_DIR/transport.pem
AtoB $CLIENT_CERT_DIR/transport.pem $CLIENT_CERT_DIR/transport.crt

# import transport certificate
certutil -A -d $CLIENT_CERT_DIR -n "$CERT_NAME" -i $CLIENT_CERT_DIR/transport.pem -t u,u,u

# generate options
java -classpath $CLASSPATH com.netscape.cms.servlet.test.GeneratePKIArchiveOptions -d $CLIENT_CERT_DIR -k $CLIENT_CERT_DIR/symkey.out -o $CLIENT_CERT_DIR/options.out -t $CLIENT_CERT_DIR/transport.crt -w Secret123

# run KRA test
cd $SRC_DIR/pki/base/kra/functional
python drmclient.py -d $CLIENT_CERT_DIR --options=options.out --symkey=symkey.out -p 12080 -n "$CERT_NAME"