#! /bin/bash
# @(#)(CAcert) $Id: update-crls,v 1.7 2015/09/14 06:51:47 root Exp $
# update-crls - script to be run from cron at regular intervals

cd /srv/crls || exit 1
mkdir -p master && cd master || exit 2

LOG=log-`date +%Y%m`.txt

for crl in revoke class3-revoke
do
    rsync -az --log-file=${LOG} webdb.intra.cacert.org::crl/${crl}.crl .
    if [ ! -e ../${crl}.crl -o ${crl}.crl -nt ../${crl}.crl ]
    then
	# make a copy
	cp -p ${crl}.crl ../${crl}.crlX
	# put new crl in place as atomic operation
	mv ../${crl}.crlX ../${crl}.crl
	# record the update in syslog
	logger -t "[update-crls]" -p daemon.notice \
		"Update for ${crl}.crl installed"
    fi
done