#!/bin/bash

POSITIONAL=()
while [[ $# -gt 0 ]]
do
key="$1"

case $key in
    -c|--nodecertpath)
    NODECERTPATH="$2"
    shift # past argument
    shift # past value
    ;;
    -b|--nebulacertbinpath)
    NEBULACERTBINPATH="$2"
    shift # past argument
    shift # past value
    ;;
    -r|--rootpath)
    ROOTPATH="$2"
    shift # past argument
    shift # past value
    ;;
    *)    # unknown option
    POSITIONAL+=("$1") # save it in an array for later
    shift # past argument
    ;;
esac
done
set -- "${POSITIONAL[@]}" # restore positional parameters

if [[ -n $1 ]]; then
    echo "Invalid Parameter(s) Entered: $1"
    exit
fi

DATETIME=$(date '+%Y%m%d-%H%M%S')

NODENAME=$(${ROOTPATH}/nebula-cert print -path ${NODECERTPATH} -json | jq -s .[].details.name | sed 's/["]//g')
NODEIPS=$(${ROOTPATH}/nebula-cert print -path ${NODECERTPATH} -json | jq -s --compact-output .[].details.ips | sed 's/[]["]//g')
NODEGROUPS=$(${ROOTPATH}/nebula-cert print -path ${NODECERTPATH} -json | jq -s --compact-output .[].details.groups | sed 's/[]["]//g') # | sed 's/,/ /g'))
CERTISCASTATUS=$(${ROOTPATH}/nebula-cert print -path ${NODECERTPATH} -json | jq -s --compact-output .[].details.isCa)

# Create new file name variable
NEWFILENAME="${NODENAME}_${DATETIME}"

if [[ $CERTISCASTATUS == true ]]; then
    echo "Certificate is the root CA Certificate. Try again with a node certificate."
    exit
fi

if [[ $CERTISCASTATUS == false ]]; then
    echo "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"
    echo "Node Name: ${NODENAME}"
    echo "Node IPs: ${NODEIPS}"
    echo "Node Groups: ${NODEGROUPS[@]}"
    echo "Certificate isCa Status: ${CERTISCASTATUS}"
    echo "DateTime: ${DATETIME}"
    echo "NEWFILENAME: ${NEWFILENAME}"
    echo "~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"
    ${ROOTPATH}/nebula-cert sign -groups ${NODEGROUPS[@]} -ip ${NODEIPS} -name ${NODENAME} -ca-crt ${ROOTPATH}/ca.crt -ca-key ${ROOTPATH}/ca.key -out-crt ${ROOTPATH}/${NEWFILENAME}.crt -out-key ${ROOTPATH}/${NEWFILENAME}.key
fi