#!/bin/bash

set -e ${DEBUG:+-x}

CUSTOM_CERTS_DIR="$OPT_DIR"/custom_certs_bundle
CUSTOM_CERTS_BUNDLE=$CUSTOM_CERTS_DIR/cacert.pm

if [ -n "${CUSTOM_CA_CERTS:-}" ] && [ ! -f "$CUSTOM_CERTS_BUNDLE" ]; then
  CERTIFI_CA_FILE=$(python3 -m certifi | head -n1)
  mkdir -p "$OPT_DIR"/custom_certs_bundle
  cp "$CERTIFI_CA_FILE" "$CUSTOM_CERTS_BUNDLE"
  IFS=","
  echo >&3 "$0: Found \$CUSTOM_CA_CERTS, going to import certificates"
  for ca_cert in $CUSTOM_CA_CERTS; do
    if [ -f "$ca_cert" ]; then
      echo -e "\n# Custom certificates" >> "$CUSTOM_CERTS_BUNDLE"
      cat "$ca_cert" >> "$CUSTOM_CERTS_BUNDLE"
      echo >&3 "$0: Import certificate file $ca_cert"
    else
      echo >&3 "$0: Missing certificate file $ca_cert"
    fi
  done
fi

if [ -f "$CUSTOM_CERTS_BUNDLE" ]; then
  echo >&3 "$0: Export $CUSTOM_CERTS_BUNDLE as a collection of Root Certificates"
  echo "export REQUESTS_CA_BUNDLE=$CUSTOM_CERTS_BUNDLE" >>"$OPT_DIR"/config_env
  echo "export SSL_CERT_FILE=$CUSTOM_CERTS_BUNDLE" >>"$OPT_DIR"/config_env
fi