update-paa-certs.sh

#! /usr/bin/env bash

 #
 # Copyright (c) 2023 Project CHIP Authors
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
 # http://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
 # distributed under the License is distributed on an "AS IS" BASIS,
 # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 # See the License for the specific language governing permissions and
 # limitations under the License.
set -e


# Usage: ./test_collections/matter/scripts/update-paa-certs.sh
#
# Will copy PAA certificates from SDK repository
#
# Environment variables can be used to override behaviour 
# - SDK_PATH (When set, SDK_SHA is ignored)
# - SDK_SHA 

# Paths
MATTER_PROGRAM_DIR=$(realpath $(dirname "$0")/..)
TH_SCRIPTS_DIR="$MATTER_PROGRAM_DIR/../../../scripts"
TMP_SDK_FOLDER="sdk-sparse"
TMP_SDK_PATH="/tmp/$TMP_SDK_FOLDER"
SDK_CERT_PATH="credentials/development/paa-root-certs"
SDK_CERT_DEVELOPMENT_PATH="credentials/development"
CERT_PATH="/var/paa-root-certs"
DEVELOPMENT_PATH="/var/credentials/development"

source "$TH_SCRIPTS_DIR/utils.sh"

# Store the current dir
CURRENT_DIR=$(pwd)

print_start_of_script

# If SDK path is not present, then do local checkout
if [ -z "$SDK_PATH" ]
then

    # If SDK SHA is not present, then fetch from Matter program config file
    if [ -z "$SDK_SHA" ]
    then
        print_script_step "Read SDK_SHA from $MATTER_PROGRAM_DIR/config.py file"
        SDK_SHA=$(cat $MATTER_PROGRAM_DIR/config.py | grep SDK_SHA | cut -d'"' -f 2 | cut -d"'" -f 2)
    fi
    printf "SDK_SHA: $SDK_SHA\n"

    print_script_step "Checkout SDK sparsely"
    rm -rf $TMP_SDK_PATH
    cd /tmp
    git clone --filter=blob:none --no-checkout --depth 1 --sparse https://github.com/project-chip/connectedhomeip.git $TMP_SDK_FOLDER
    cd $TMP_SDK_FOLDER
    git sparse-checkout init
    git sparse-checkout set $SDK_CERT_PATH $SDK_CERT_DEVELOPMENT_PATH
    git checkout -q $SDK_SHA
    SDK_PATH="$TMP_SDK_PATH"
fi

printf "\nSDK_PATH: $SDK_PATH\n"

# Back to execution dir
cd $CURRENT_DIR

# Create folder if missing (owned by user)
if [ ! -d "$CERT_PATH" ]
then
    print_script_step "Creating certification folder"
    sudo mkdir -p $CERT_PATH
    sudo chown $USER:$USER $CERT_PATH
fi

# Create folder if missing (owned by user)
if [ ! -d "$DEVELOPMENT_PATH" ]
then
    print_script_step "Creating developer certification folder"
    sudo mkdir -p $DEVELOPMENT_PATH
    sudo chown $USER:$USER $DEVELOPMENT_PATH
fi

print_script_step "Copying Certificates from SDK"
echo "Running copy command: cp "$SDK_PATH/$SDK_CERT_PATH/"* $CERT_PATH/"
cp "$SDK_PATH/$SDK_CERT_PATH/"* $CERT_PATH/

print_script_step "Copying Developer Certificates from SDK"
echo "Running copy command: cp -R "$SDK_PATH/$SDK_CERT_DEVELOPMENT_PATH/"** $DEVELOPMENT_PATH/"
cp -R "$SDK_PATH/$SDK_CERT_DEVELOPMENT_PATH/"** $DEVELOPMENT_PATH/

print_end_of_script