#!/bin/sh


if [ -f "$STEP_ROOT" ] && [ -f "$CRT" ] && [ -f "$KEY" ];
then
    echo "Found existing $STEP_ROOT, $CRT, and $KEY, skipping bootstrap"
    exit 0
fi

# Download the root certificate and set permissions
if [ "$DURATION" == "" ];
then
    step ca certificate $COMMON_NAME $CRT $KEY
else
    step ca certificate --not-after $DURATION $COMMON_NAME $CRT $KEY
fi

step ca root $STEP_ROOT

if [ -n "$OWNER" ]
then
    chown "$OWNER" $CRT $KEY $STEP_ROOT
fi

if [ -n "$MODE" ]
then
    chmod "$MODE" $CRT $KEY $STEP_ROOT
else
    chmod 644 $CRT $KEY $STEP_ROOT
fi