#! /usr/bin/env perl -w

# update-simple-ca
# create a new simple ca setup package which uses the more-secure sha1 hash
# instead of the md5 hash which was the default in GT 4.0.7 and earlier and
# GT 4.2.0

use strict;
use Getopt::Long;
use File::Temp qw/tempdir/;

sub usage
{
    my $rc = shift;
    print "update-simple-ca [SIMPLE-CA-DIR]\n";
    exit(0);
}

my $help = 0;
my $result = GetOptions("help" => \$help);

if ($help) {
    usage(0);
} elsif (!$result) {
    usage(1);
}

if (scalar(@ARGV) == 0) {
    push(@ARGV, "$ENV{HOME}/.globus/simpleCA");
}

foreach my $cadir (@ARGV) {
    my $tarball = glob("$cadir/globus_simple_ca_*_setup-[0-9].[0-9][0-9].tar.gz");
    my $tarname = $tarball;
    my $tempdir;
    my $pkgname = $tarball;

    if (! -r $tarball) {
        print STDERR "Error reading $tarball\n";
        exit(1);
    }

    $tarname =~ s|.*/([^/]*)$|$1|;
    $pkgname =~ s|.*/([^/]*)\.tar\.gz$|$1|;

    $tempdir = tempdir(CLEANUP => 1);

    chdir $tempdir;


    system("gzcat $tarball | tar xf -");
    chdir $pkgname;
    open(PATCH, "|patch");

    print PATCH <<EOF;
--- globus-ssl.conf.orig	2008-07-28 16:05:33.000000000 -0400
+++ globus-ssl.conf	2008-07-28 16:05:39.000000000 -0400
@@ -27,7 +27,7 @@
 x509_extensions	= x509v3_extensions	# The extentions to add to the cert
 default_days	= 365			# how long to certify for
 default_crl_days= 365 # DEE 30	# how long before next CRL
-default_md	= md5			# which md to use.
+default_md	= sha1			# which md to use.
 preserve	= no			# keep passed DN ordering
 
 # A few difference way of specifying how similar the request should look
@@ -62,6 +62,7 @@
 default_keyfile 	= privkey.pem
 distinguished_name	= req_distinguished_name
 req_extensions          = v3_req
+default_md	        = sha1		# which md to use.
 
 [ req_distinguished_name ]
 # BEGIN CONFIG
EOF
    close(PATCH);
    chdir "..";
    system("tar cf - $pkgname | gzip -9 > $cadir/$pkgname-new.tar.gz ");
}