ls:
	ls -l

all:
	make make-ca-private-key
	make make-Certificate-Authority-Certificate-file
	make create

make-ca-private-key:
	certtool --generate-privkey > certificate_authority_key.pem
	# umask 277 certificate_authority_key.pem
	make ls

make-Certificate-Authority-Certificate-file:
	certtool --generate-self-signed \
		--template certificate_authority_template.info \
		--load-privkey certificate_authority_key.pem \
		--outfile certificate_authority_certificate.pem

create:
	mkdir -p debian/files/etc/pki/CA/
	mkdir -p debian/DEBIAN
	cp control debian/DEBIAN/
	echo "2.0" > debian/debian-binary
	cp certificate_authority_certificate.pem debian/files/etc/pki/CA/cacert.pem
	chmod 444 debian/files/etc/pki/CA/cacert.pem
	cd debian/files/ && md5sum etc/pki/CA/cacert.pem > ../DEBIAN/md5sum
	cd debian/DEBIAN && tar --ignore-failed-read -cvJf ../control.tar.xz {post,pre}{inst,rm} md5sums control
	cd debian/files && tar -cvJf ../data.tar.xz .
	cd debian && ar rcs ../wit-TLS-cert.deb debian-binary control.tar.xz data.tar.xz

clean:
	rm -f *.pem
	rm -f *.deb
	rm -rf debian/