#!/bin/sh
set -eu

CERT_FILE="/tmp/eset-custom-ca.crt"

cat > "$CERT_FILE" <<'EOF'
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

EOF

openssl x509 -in "$CERT_FILE" -noout -subject -issuer -dates

if [ -f /etc/os-release ]; then
    . /etc/os-release
else
    echo "Cannot detect Linux distribution"
    exit 1
fi

case "$ID" in
    ubuntu|debian)
        DEST="/usr/local/share/ca-certificates/custom-ca.crt"
        cp "$CERT_FILE" "$DEST"
        update-ca-certificates
        ;;

    rhel|rocky|almalinux|ol|amzn)
        DEST="/etc/pki/ca-trust/source/anchors/custom-ca.crt"
        cp "$CERT_FILE" "$DEST"
        update-ca-trust extract
        ;;

    sles|sles_sap|opensuse-leap)
        DEST="/etc/pki/trust/anchors/custom-ca.crt"
        cp "$CERT_FILE" "$DEST"
        update-ca-certificates
        ;;

    *)
        echo "Unsupported distribution: $ID"
        exit 1
        ;;
esac

echo "Certificate installation completed"