#
# Copyright 2021 Google LLC
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# version 2 as published by the Free Software Foundation.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#

EAPI=7

SRC_URI=""
KEYWORDS="*"

DESCRIPTION="Ephemeral key that can be embedded into EFI shim"
HOMEPAGE=""
LICENSE="Apache-2.0"
SLOT="0"
IUSE=""

BDEPEND="dev-libs/openssl"

src_unpack() {
	echo mkdir -p "${S}"
	mkdir -p "${S}"
}

src_prepare() {
	openssl req -new -nodes -utf8 -days 36500 \
		-batch -x509 -config "${FILESDIR}/x509.genkey" \
		-outform PEM -out "${S}/signing_key.x509" \
		-keyout "${S}/signing_key.pem"
	openssl x509 -in "${S}/signing_key.x509" \
		-out "${S}/signing_key.cer" -outform DER
	default
}

src_install() {
	insinto /build/share/platform-key
	doins "signing_key.pem"
	doins "signing_key.x509"
	doins "signing_key.cer"
}