#!/usr/bin/sh
# Author: xtex <xtex@aosc.io>
# SPDX-License-Identifier: GPL-3.0

set -eu
export LC_ALL=C

mkdir -p /etc/ssl/certs/java

echo "Exporting system CA store as Java KeyStore ..."
trust extract --overwrite --comment \
    --format=java-cacerts \
    --filter=ca-anchors \
    --purpose=server-auth \
    "/etc/ssl/certs/java/cacerts"

echo "Allowing all users to read CA store ..."
chmod -v a+r /etc/ssl/certs/java/cacerts

echo "Updated Java CA certificate store."
