#!/bin/bash
# this script mounts the ca-store
# the paths are hardcoded defaults

echo "Mounting encrypted certificate store"

if [ -f /var/lib/openvpn-server/ca-store ]
then 
        losetup /dev/loop0 /var/lib/openvpn-server/ca-store
        echo "Please enter your password for the ca-store"
        cryptsetup create ca-store /dev/loop0
        mount /dev/mapper/ca-store /var/lib/openvpn-server/openssl/ 
        if [ $? != 0 ] 
        then 
            echo "Epic mount FAIL!"
            dmsetup remove ca-store
            losetup -d /dev/loop0
            exit 1
        else 
            echo "Must have worked, setting auto umount-ca-store to 10 minutes."
            at now + 10 minutes -f /usr/lib/openvpn-server/ovs-commands/umount-ca-store
        fi
else 
        echo "ca-store file doesn't exist. Did you create it?"

fi


