refactor

scripts/openssl-cert-auto-pem.sh

@@ -0,0 +1,50 @@
+#!/bin/sh
+set -f
+
+[ $# -gt 0 ] || exit 0
+me=${0##*/}
+
+[ -n "$1" ] || exit 1
+[ -f "$1" ] || {
+	env printf '%s: not a file or does not exist: %q\n' "${me}" "$1" >&2
+	exit 1
+}
+[ -s "$1" ] || exit 0
+
+w=$(mktemp -d) || exit 1
+w_cleanup() {
+	[ -z "$w" ] || ls -lA "$w/"
+	[ -z "$w" ] || rm -rf "$w"
+	unset w
+	exit "${1:-0}"
+}
+
+openssl storeutl -certs "$1" > "$w/cert.pem" || w_cleanup 1
+[ -s "$w/cert.pem" ] || w_cleanup 1
+tr -s '\r\n' '\n' < "$w/cert.pem" > "$w/cert.txt"
+[ -s "$w/cert.txt" ] || w_cleanup 1
+
+awk '
+BEGIN {
+    OFS = ","
+    m_begin="-----BEGIN CERTIFICATE-----"
+    m_end="-----END CERTIFICATE-----"
+    i_begin = 0
+}
+$0 == m_begin { i_begin = NR ; }
+$0 == m_end {
+    if (i_begin > 0) {
+        print i_begin,NR
+        i_begin = 0
+    }
+}
+' "$w/cert.txt" > "$w/cert.offsets"
+[ -s "$w/cert.offsets" ] || w_cleanup 1
+
+while read -r a ; do
+	[ -n "$a" ] || continue
+
+	sed -ne "${a}p" "$w/cert.txt"
+done < "$w/cert.offsets"
+
+rm -rf "$w" ; unset w