From beffca972c4f5f7a17ab158b2103e4b21c0463db Mon Sep 17 00:00:00 2001
From: Alexandre CATTEAU <alexandre.catteau@gmail.com>
Date: Sun, 13 Nov 2022 12:13:34 +0100
Subject: [PATCH] Initial commit

---
 .gitignore |  1 +
 README.md  |  8 ++++++++
 install.sh | 28 ++++++++++++++++++++++++++++
 kto.crt    | 31 +++++++++++++++++++++++++++++++
 4 files changed, 68 insertions(+)
 create mode 100644 .gitignore
 create mode 100644 README.md
 create mode 100755 install.sh
 create mode 100644 kto.crt

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..a4603f7
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1 @@
+.disabled
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..4daabb5
--- /dev/null
+++ b/README.md
@@ -0,0 +1,8 @@
+# Install KTO Root Certificates
+
+This repository contains a small setup to automate the delivery of our root certificates to clients.
+
+### Files
+* `kto.crt` is our current only root certificate
+#### Installation
+* `install.sh` copies the certificates to the right location and then reloads the system's certificates
diff --git a/install.sh b/install.sh
new file mode 100755
index 0000000..cff34ce
--- /dev/null
+++ b/install.sh
@@ -0,0 +1,28 @@
+#!/usr/bin/env bash
+
+run_directory=$(dirname $(readlink -f "$0"))
+user=$(whoami)
+
+if [ -f $run_directory/.disabled ]; then
+  echo "Installation is disabled. Exiting..."
+  exit 0
+fi
+
+if [[ $user != 'root' ]]; then
+  sudo="sudo"
+else
+  sudo=""
+fi
+
+$sudo cp $run_directory/*.crt /etc/ca-certificates/trust-source/anchors/
+if command -v update-ca-trust > /dev/null; then
+  $sudo update-ca-trust
+elif command -v update-ca-certificates > /dev/null; then
+  $sudo update-ca-certificates
+else
+  echo "No update-ca binary found. Exiting with error!"
+  exit 1
+fi
+
+echo "Finished install. Exiting..."
+exit 0
diff --git a/kto.crt b/kto.crt
new file mode 100644
index 0000000..119d005
--- /dev/null
+++ b/kto.crt
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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=
+-----END CERTIFICATE-----