#!/usr/bin/env bash
set -euo pipefail
TMP="/tmp/orra-systems-root-ca.crt"
curl -fsSL http://portal.orra.cloud/trust/root-ca.crt -o "$TMP"

if command -v update-ca-certificates >/dev/null 2>&1; then
  sudo cp "$TMP" /usr/local/share/ca-certificates/orra-systems-root-ca.crt
  sudo update-ca-certificates
elif command -v update-ca-trust >/dev/null 2>&1; then
  sudo cp "$TMP" /etc/pki/ca-trust/source/anchors/orra-systems-root-ca.crt
  sudo update-ca-trust
else
  echo "No supported CA update command found."
  exit 1
fi

echo "ORRA Systems Root CA installed."