#!/bin/bash
#
# Update both dbm (old style) and sql type nssdb files in users' homedirs.
#

set -e

BASE_HOME=/skole/tjener/home0
for i in $(ls /skole/tjener/home0/ | grep -v lost+found) ; do
    if [ -d $BASE_HOME/$i/.mozilla/firefox/debian-edu.default ] ; then
        su - $i sh -c 'certutil  -A -d sql:$HOME/.mozilla/firefox/debian-edu.default/ -t "CT,CT," -n "DebianEdu" -i /etc/ssl/certs/Debian-Edu_rootCA.crt'
        su - $i sh -c 'certutil  -A -d dbm:$HOME/.mozilla/firefox/debian-edu.default/ -t "CT,CT," -n "DebianEdu" -i /etc/ssl/certs/Debian-Edu_rootCA.crt'
    fi
    if [ -d $BASE_HOME/$i/.thunderbird/debian-edu.default ] ; then
        su - $i sh -c 'certutil  -A -d sql:$HOME/.thunderbird/debian-edu.default/ -t "CT,CT," -n "DebianEdu" -i /etc/ssl/certs/Debian-Edu_rootCA.crt'
        su - $i sh -c 'certutil  -A -d dbm:$HOME/.thunderbird/debian-edu.default/ -t "CT,CT," -n "DebianEdu" -i /etc/ssl/certs/Debian-Edu_rootCA.crt'
    fi
    if [ -d $BASE_HOME/$i/.pki/nssdb ] ; then
        su - $i sh -c 'certutil  -A -d sql:$HOME/.pki/nssdb/ -t "CT,CT," -n "DebianEdu" -i /etc/ssl/certs/Debian-Edu_rootCA.crt'
    fi
    logger -t update-cert-dbs "Updated nssdb files for user accounts in $BASE_HOME/."
done
