#!/bin/bash

if ls /opt/puppetlabs/puppet/ssl/certs/*.pem > /dev/null 2>&1 ; then
  # Import any custom certs provided by the user
  export KEYTOOL=/opt/puppetlabs/server/bin/keytool
  pushd /opt/puppetlabs/server/apps/java/lib/jvm/java/jre/lib/security
    for pem_file in /opt/puppetlabs/puppet/ssl/certs/*.pem ; do
      /bin/echo yes | $KEYTOOL -import \
      -alias `basename $pem_file .pem` \
      -keystore cacerts -storepass 'changeit' -file $pem_file ||:
    done
  popd
fi
