#!/bin/bash

set -e 

KEYSTORE_PATH=/etc/ssl/certs/java/cacerts

check_no_ks() {
    if [ -e $KEYSTORE_PATH ]; then
        echo "Keystore exists at $KEYSTORE_PATH, this is not expected"
        exit 1
    fi
}

check_ks_type() {
    local expected=$1
    local output=
    local ks_type=

    output=$(keytool -list -keystore $KEYSTORE_PATH -storepass changeit)
    ks_type=$(echo "$output" | sed -n 's/^key *store type: //Ip' | tr '[:upper:]' '[:lower:]')

    if [[ $ks_type != $expected ]]; then
        echo "Wrong keystore type, expected '$expected', got '$ks_type'"
        echo "Full output below:"
        echo "$output"
        exit 1
    fi
}

apt-get install -y gcj-6-jre-headless
apt-get install -y ca-certificates-java
check_no_ks

apt-get install -y openjdk-8-jre-headless
check_ks_type jks
