%sh
#script to create a truststore file with your BDCS-CE self-signed certificate

rm -r /tmp/dvd
mkdir /tmp/dvd
cd /tmp/dvd

echo "Gathering the self-signed certificate"
# it is also stored at /u01/bdcsce/etc/nginx/nginx.crt
echo | \
  openssl s_client -connect 127.0.0.1:1080 2>/dev/null | \
  openssl x509 >nginx.crt

echo "Creating bdcsce.jks trust store file"  
/usr/java/default/bin/keytool -import -trustcacerts \
  -keystore /tmp/dvd/bdcsce.jks \
    -storepass welcome -noprompt \
  -alias bdcsce \
  -file nginx.crt;

echo "Validating bdcsce.jks trust store contents"  
/usr/java/default/bin/keytool \
  -keystore /tmp/dvd/bdcsce.jks \
  -storepass welcome \
  -list -v
  
#copy the truststore to somewhere we can download it
echo "Copying bdcsce.jks trust store to browser accessible location"  
sudo cp /tmp/dvd/bdcsce.jks /data/tmp/spocui/spoccs/webapp/css/images/bdcsce/bdcsce.jks

echo "done"