#!/bin/sh

truststore=$JAVA_HOME/lib/security/cacerts
path_to_cert=$1
storepassword=$2

awk 'split_after == 1 {n++;split_after=0} /-----END CERTIFICATE-----/ {split_after=1}{print > "rds-ca-" n ".pem"}' < $path_to_cert

for CERT in rds-ca-*; do
  alias=$(openssl x509 -noout -subject -in $CERT | sed -n 's/.*CN *= *\([^,]*\).*/\1/p')
  echo "Importing $alias"
  keytool -import -file ${CERT} -alias "${alias}" -storepass ${storepassword} -keystore ${truststore} -noprompt
  rm $CERT
done