#!/bin/sh

set -e
set -u

if [ "$#" != 1 ]; then
	echo >&2 "Usage: $0 <hostname>"
	exit 1
fi

h="$1"
#echo "Expect svn cert fingerprint to be"
#echo " 66:ab:46:50:ce:21:a5:4a:36:8c:82:0e:77:81:34:d5:53:10:d0:99"
echo
ssh "$h" 'if ! [ -e .dotfiles ] || ( [ -e .dotfiles/.svn ] && mv .dotfiles .dotfiles-svn ); then
	rm -rf .dotfiles.new &&
	cat > .git2.palfrader.org.crt << EOF &&
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
EOF
	git -c http.sslCAinfo="$HOME"/.git2.palfrader.org.crt -c http.sslCAPath="$HOME"/.nonexistent clone https://git2.palfrader.org/git/conf/dotfiles.git .dotfiles.new &&
	rm -f .git2.palfrader.org.crt &&
	mv .dotfiles.new .dotfiles &&
	cd .dotfiles &&
	git config --local --add http.sslCAinfo "$HOME"/.dotfiles/.certs/git2.palfrader.org.crt &&
	git config --local --add http.sslCAPath "$HOME"/.nonexistent &&
	./Link-Them &&
	echo "All done";
  elif [ -e .dotfiles/.git ]; then
	cat > .git2.palfrader.org.crt << EOF &&
-----BEGIN CERTIFICATE-----
MIIFDTCCAvWgAwIBAgIJAIsni+g4o/7PMA0GCSqGSIb3DQEBCwUAMB0xGzAZBgNV
BAMMEmdpdDIucGFsZnJhZGVyLm9yZzAeFw0xNDExMjcxMzE5MzJaFw0yNDExMjQx
MzE5MzJaMB0xGzAZBgNVBAMMEmdpdDIucGFsZnJhZGVyLm9yZzCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAOVU+Ui2WRW6G5iJuuNX8iwH/Gu/avD+sh6M
m5JCW2HQg+05MbFVYbl7qm8ztc54Gw2UX4ohCqIJxuqxJD0zREA7obINvLhaGzp6
aE4c+M0ho5QMJLdeMsgVR1esMy8bixGm4gZ4xR62aIU8tnyW8dBSuSXVjVi+a4qe
UJE+n/oSuxOty4I/sdH+t4WRD7dBg0qFowVhvTuBP8sQGyvUuTXuooPKydjDXdCX
2h2jxfMJnZ/Tu/MPttqh790BYDEjRSri3ZwtnksX8rH8t/fAguKk32M3uyZA88GH
19JNHa2T+ifKNoFtI0o6Q6+b/3c9iJ5vY7Sj9VwKqhUgx49z4XB4+y1lRvvHNGrn
skO/WpYd0f+0zS+LG/SEcbI7zZoTm5z8gdYHXAYJEw1MhBiP3x3Eclz4WGXparlf
u1q+tVIty461g5NYrVgTpRx6bnMPRcU6llq2bqf8aFRpdLF+Ca6MIlVqs5q51Vj4
NHX5idzKAywG9wLHSuyN8Si2UqDBvBZBXmc2tPpYm+VPrWLWKCXnUfSP1EgCHkLF
+EkoR4tdbYlam0Pt4vd5psLWm4OePF+BeDKM5FIfdl+vfbo+JQY7FLXxABahDBVi
QWyp5oGCbA/5BJz8Hw7M4+wJHg/ENduu2PO8Ug2umeoiTYKuJGNw2VhMayqUpty2
EGWoK6WhAgMBAAGjUDBOMB0GA1UdDgQWBBSpwugNzLpR5fwG2pBDfDjqwqMC7jAf
BgNVHSMEGDAWgBSpwugNzLpR5fwG2pBDfDjqwqMC7jAMBgNVHRMEBTADAQH/MA0G
CSqGSIb3DQEBCwUAA4ICAQCwz7kpFE9hwrp17Za5j1ndcpiwShlQZ0sj28NTQp6w
KOPhDnB4sQYdKwm8pc//tMOiKn0UDDQzEkWCOdWytezkbYOQ3BoRuYOovWZox2Qx
PFvnjEs0QRt09XFRCpZDyKZY8nq2CRogNLzSfezeJxy7N0KH2pdKOq9XnB7uWta6
Yn0iSLWsAF7EM00xHavAdsHEN5Y6F01o18U7+c3nf5mf4ZXKqMHrLksvFIxqNr1s
bmpt3xkYqvY9f2PmcVCEO1l/SDXrDfFuB7MOs7K63NVMunnePvFWweyOi3yS9f2t
AsDzp63fNXOYzM7CbQBo2SDuTIUXFNeIEk7csf1KY2lw91McGG+WG79GgKq63pow
iP8pN1PkzovkaJL+xcjEHnEc3PDJAz3zp3sImK13Mu/aCSOeWio6G899rs8qfwFT
Kc/VzHcX2b2BahM4qu6sTA71P2R1Ek/Sv/XP4UiWCqh+2jd7NHqbmp9QERIJnN0n
4PS3EeGIRrRxZnewG/HslSSk12yZ1r9AUlpM8PZbPd9cUYR65X1V0cHyOfskxGhX
GNkMrry7av7b5DH4cCyKICLADrcp8avKRqOz3sl1ZluqpRjxSngK4M50v5ArVJJk
sXmB2EZXwPrgijgIFWpRTarioptI9NxNF4RtpAjH1dI1VtP9kybvYKSP+z3cniFL
4Q==
-----END CERTIFICATE-----
EOF
	rm -f .gitconfig &&
	cd .dotfiles &&
	git remote set-url origin https://git2.palfrader.org/git/conf/dotfiles.git &&
	git -c http.sslCAinfo="$HOME"/.git2.palfrader.org.crt -c http.sslCAPath="$HOME"/.nonexistent pull &&
	git config --local --add http.sslCAinfo "$HOME"/.dotfiles/.certs/git2.palfrader.org.crt &&
	git config --local --add http.sslCAPath "$HOME"/.nonexistent &&
	rm -f .git2.palfrader.org.crt &&
	./Link-Them &&
	echo "Pulled with current cert.";
	fi
	'