#!/bin/sh

storepass='changeit'
. /etc/default/cacerts

if [ "$cacerts_updates" != yes ] || [ "$CACERT_UPDATES" = disabled ]; then
  echo "updates of cacerts keystore disabled."
  exit 0
fi

java \
  -cp /usr/share/ca-certificates-java/ca-certificates-java.jar \
  org.debian.security.UpdateCertificates \
  -storepass "$storepass"
