From: Felix Dörre <felix@dogcraft.de>
Date: Tue, 26 May 2015 13:50:07 +0000 (+0200)
Subject: adding script to generate cacerts.jks from NRE-roots
X-Git-Url: https://code.wpia.club/?p=gigi.git;a=commitdiff_plain;h=8c78a5b446974b9814a3eeb748659153d1a7bc4c

adding script to generate cacerts.jks from NRE-roots
---

diff --git a/config/generateTruststoreNRE.sh b/config/generateTruststoreNRE.sh
new file mode 100755
index 00000000..77473576
--- /dev/null
+++ b/config/generateTruststoreNRE.sh
@@ -0,0 +1,26 @@
+#!/bin/bash
+# this script imports the cacert root certs
+
+rm -f cacerts.jks
+
+function import(){
+  keytool -importcert -keystore ../config/cacerts.jks -file "$1.crt" -alias own -storepass "changeit" -alias "$1" $2
+}
+
+function importP(){
+ keytool -importkeystore -srckeystore "$1" -noprompt -destkeystore keystore.pkcs12 -srcstoretype pkcs12 -deststoretype pkcs12 -deststorepass changeit -srcstorepass changeit
+}
+
+import ca/root -noprompt
+import ca/assured
+import ca/unassured
+
+for i in ca/{,un}assured_*; do
+  import ${i%.crt}
+done
+
+for i in keys/*.pkcs12; do
+  importP $i
+done
+
+keytool -list -keystore ../config/cacerts.jks -storepass "changeit"