#!/bin/bash 

set -e

if [ -f /var/lib/openvpn-server/ca-store ]
then
    if grep -q ca-store /proc/mounts
    then
        echo "ca-store mounted"
    else
        echo "ca-store not mounted, or your session has expired."
        echo "Use ovs mount-ca-store to mount your ca-store"
        exit 1
    fi

fi

. /usr/share/openvpn-server/functions.sh
. /etc/openvpn-server/config.sh

WORKDIR=$(mktemp -d)

pushd $WORKDIR >/dev/null

if [ -z $1 ] || [ -z $2 ] ; then
    ask_key_questions
else
    OVPN_COMMONNAME=$1
    OVPN_EMAIL=$2
fi

FILEBASE="${OVPN_ORGNICK}-${OVPN_COMMONNAME}"

make_pkcs12 "$OVPN_EMAIL" "$OVPN_COMMONNAME" "./${FILEBASE}.p12"

sed "s/%%ORGNICK%%/$OVPN_ORGNICK/;
        s/%%USERNAME%%/$OVPN_COMMONNAME/"                                 \
        /usr/share/openvpn-server/windows-client/sol1-deploy.nsi        \
        > openvpn-deploy.nsi

sed "s/%%ORGNICK%%/$OVPN_ORGNICK/;
        s/%%USERNAME%%/$OVPN_COMMONNAME/;
        s/%%REMOTE%%/$OVPN_REMOTE/"                                     \
        /usr/share/openvpn-server/config-templates/ovpn-client.conf     \
        > ${FILEBASE}.ovpn

makensis -NOCD ./openvpn-deploy.nsi >/dev/null 2>&1

popd >/dev/null

if [ "$CACHE_BUILDS" == "yes" ]; then 
    mv $WORKDIR/sol1-openvpn-deploy.exe /var/lib/openvpn-server/openssl/builds/openvpn-${FILEBASE}.exe
	echo "Your OpenVPN Windows client has been built in /var/lib/openvpn-server/openssl/builds/openvpn-${FILEBASE}.exe"
else 
    mv $WORKDIR/sol1-openvpn-deploy.exe ./openvpn-${FILEBASE}.exe
	echo "Your OpenVPN Windows client has been built in openvpn-${FILEBASE}.exe"
fi

rm -rf $WORKDIR


allocate_ip()