#!/bin/sh
# postinst script for ssl-cert2
#
# see: dh_installdeb(1)

set -e
#set -x

. /usr/share/debconf/confmodule
db_version 2.0

#SSL_CERT2_LIB#

# summary of how this script can be called:
#        * <postinst> `configure' <most-recently-configured-version>
#        * <old-postinst> `abort-upgrade' <new version>
#        * <conflictor's-postinst> `abort-remove' `in-favour' <package>
#          <new-version>
#        * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
#          <failed-install-package> <version> `removing'
#          <conflicting-package> <version>
# for details, see http://www.debian.org/doc/debian-policy/ or
# the debian-policy package
#


#======

snakeoil_overwrite() {

  if snakeoil_exists ; then
    
    db_get ssl-cert2/overwrite_snakeoil

    if [ "$RET" = "true" ]; then
      rm -f "$SNAKEOIL_PEM"
      rm -f "$SNAKEOIL_KEY_PEM"
    fi
    db_set ssl-cert2/overwrite_snakeoil false

  fi

}

setup_config() {

  db_get ssl-cert2/manage_certs 

  set_manage_certs "$RET"

  db_get ssl-cert2/country
  set_country "$RET" 
  db_get ssl-cert2/state
  set_state "$RET"
  db_get ssl-cert2/locality
  set_locality "$RET"
  db_get ssl-cert2/organisation
  set_organisation "$RET" 
  db_get ssl-cert2/unit
  set_unit "$RET"
  db_get ssl-cert2/common_name
  set_common_name "$RET"
  db_get ssl-cert2/email
  set_email "$RET"

}

case "$1" in
    configure|reconfigure)

      if ! getent passwd ssl-cert >/dev/null; then
        addgroup --quiet --system ssl-cert
      fi

      chgrp ssl-cert /etc/ssl/private
      chmod g+x /etc/ssl/private

      setup_config

      if [ "$(manage_certs)" = "true" ]; then
        snakeoil_overwrite
        make_package_links 
        create_certificate
        make_sitewide_link
      else
        remove_package_links
      fi

    ;;

    abort-upgrade|abort-remove|abort-deconfigure)

    ;;

    *)
        echo "postinst called with unknown argument \`$1'" >&2
        exit 1
    ;;
esac

# dh_installdeb will replace this with shell code automatically
# generated by other debhelper scripts.

#DEBHELPER#

exit 0