pushd ../certs >/dev/null

source ./cert-def

# Fedora project authority
# ./cert-import homebundle admin.fedoraproject.org  # good to do first?
./cert-import homebundle firefox https://admin.fedoraproject.org/ca/cacert.pem
./cert-import homebundle -nocrl https://admin.fedoraproject.org/ca/crl.pem

# CAcert.org ... should utilize cert_pick_url_selfsigned (not tested yet)
# ./cert-import homebundle firefox https://www.cacert.org/certs/root.crt
# ./cert-import homebundle -nocrl https://crl.cacert.org/revoke.crl

# GitHub
./cert-import homebundle -nocrl \
	https://www.digicert.com/CACerts/DigiCertHighAssuranceEVRootCA.pem \
	https://www.digicert.com/CACerts/DigiCertHighAssuranceEVCA-1.crt
./cert-import homebundle -nocrl www.github.com

# npm (prerequisite: GitHub)
NPMCA_SRC="https://raw.github.com/isaacs/npm/master/node_modules/npmconf/config-defs.js"
wget -nv --ca-certificate "${HOMEBUNDLE}" -O - -- "${NPMCA_SRC}" \
  | sed -n '120,135{s|^\s\+\(\[\s*\)\?\"\([^\"]\+\)\\n\"[+,]|\2|g;p}' \
  >> "${CA_BUNDLE_NPM}"
unset NPMCA_SRC

popd >/dev/null