#!/bin/bash
#
# CERTKEY creation command:
# openssl pkcs12 -export
#  -in ~/nic/enum/client/trunk/fred/certificates/test-cert.pem
#  -inkey ~/nic/enum/client/trunk/fred/certificates/test-key.pem
#  -passout pass:SomePassword -out ~/certkey.pkcs12
#
JSIGNER=/usr/share/jsignpdf/JSignPdf.jar
CERTKEY=/etc/fred/cert/signpdf.certkey.pkcs12
TMPDIR=$(mktemp -d /tmp/jsignpdf-visible.XXXXXXXX)
FILE=${TMPDIR}/file

# These settings can be changed by /etc/fred/signpdf.conf
PASSWORD=""
TIMEZONE="Europe/Prague"
L2_TEXT="Tento výpis elektronicky podepsalo sdružení CZ.NIC, z.s.p.o. dne \${timestamp}"

source /etc/fred/signpdf.conf

cat > $FILE
TZ="${TIMEZONE}" java -jar $JSIGNER \
    --l2-text "${L2_TEXT}" \
    -V \
    -llx 64.5 \
    -lly -105 \
    -urx 600 \
    -ury 250 \
    -fs 8 \
    -ksf $CERTKEY \
    -kst PKCS12 \
    -ksp "${PASSWORD}" \
    -q \
    -d $TMPDIR \
    $FILE 2> >(grep -vE '^WARNING net.sf.jsignpdf.utils.PropertyProvider' >&2)

cat ${FILE}_signed.pdf
rm $FILE
rm ${FILE}_signed.pdf
rmdir ${TMPDIR}
