#!/bin/bash
set -e

# this is only useful if you want to combine multiple cert chains
# into a single trust store
# you will need to define trust store password
# use e.g. kafbat's truststore_password from vault

dest=truststore-bundle.jks

[[ -z $@ ]] && echo "usage: ${0##*/} <certificate chain files>" && exit 1

for chainfile in $@; do
	[[ ! -f $chainfile ]] && echo cannot find $chainfile && exit 1
done; unset chainfile

[[ -f $dest ]] && echo $dest already exists, delete it first && exit 1

# dirty hack - assuming _chain.crt extension
for chainfile in $@; do
	echo writing $dest
	keytool -importcert -keystore $dest \
		-noprompt -trustcacerts \
		-file $chainfile -alias ${chainfile%_chain.crt}
	echo done
	echo
done; unset chainfile

echo all done