cacert.sh

#!/usr/bin/env bash

# Copyright (C) Viktor Szakats. See LICENSE.md
# SPDX-License-Identifier: MIT

# shellcheck disable=SC3040,SC2039
set -o xtrace -o errexit -o nounset; [ -n "${BASH:-}${ZSH_NAME:-}" ] && set -o pipefail

export _NAM _VER _OUT _BAS _DST

_NAM="$(basename "$0" | cut -f 1 -d '.')"
_VER="$1"

(
  cd "${_NAM}" || exit 0

  # Make steps for determinism

  readonly _ref="${_CACERT}"

  # Create package

  _OUT="${_NAM}-${_VER}${_REVSUFFIX}${_PKGSUFFIX}"
  _BAS="${_NAM}-${_VER}${_PKGSUFFIX}"
  _DST="$(pwd)/_pkg"; rm -r -f "${_DST}"

  mkdir -p "${_DST}/bin"

  # To avoid depending on yet another unversioned download (or vendoring
  # the license), link to it instead:
  url='https://www.mozilla.org/media/MPL/2.0/index.txt'
  if [ "${_OS}" = 'win' ]; then
    _fn="${_DST}/LICENSE.url"
    cat <<EOF | sed 's/$/\r/' > "${_fn}"
[InternetShortcut]
URL=${url}
EOF
  elif [ "${_OS}" = 'mac' ]; then
    _fn="${_DST}/LICENSE.webloc"
    cat <<EOF > "${_fn}"
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>URL</key>
  <string>${url}</string>
</dict>
</plist>
EOF
  else
    _fn="${_DST}/LICENSE-URL.txt"
    echo "${url}" > "${_fn}"
  fi
  touch -c -r "${_ref}" "${_fn}"

  # TODO: Omit external CA bundle from distro?
  cp -f -p "${_CACERT}" "${_DST}/bin/curl-ca-bundle.crt"

  ../_pkg.sh "$(pwd)/${_ref}"
)