#!/bin/bash
#
# CERTKEY creation command:
# openssl pkcs12 -export
#  -in ~/nic/enum/client/trunk/fred/certificates/test-cert.pem
#  -inkey ~/nic/enum/client/trunk/fred/certificates/test-key.pem
#  -passout pass:SomePassword -out ~/certkey.pkcs12
#
JSIGNER=/usr/share/jsignpdf/JSignPdf.jar
CERTKEY=/etc/fred/cert/signpdf.certkey.pkcs12
TMPDIR=$(mktemp -d /tmp/jsignpdf.XXXXXXXX)
FILE=${TMPDIR}/file

# These settings can be changed by /etc/fred/signpdf.conf
PASSWORD=""

source /etc/fred/signpdf.conf

cat > $FILE
java -jar $JSIGNER \
    -ksf $CERTKEY \
    -kst PKCS12 \
    -ksp "${PASSWORD}" \
    -q \
    -d $TMPDIR \
    $FILE 2> >(grep -v "log4j:WARN" >&2)

cat ${FILE}_signed.pdf
rm $FILE
rm ${FILE}_signed.pdf
rmdir ${TMPDIR}
