Add a script to trim pretty-printed decodes of X509 certs, for use in

shrinking ramdisk cert.pem files.   ok deraadt

1 files changed, 35 insertions, 0 deletions

diff --git a/distrib/miniroot/trimcerts.awk b/distrib/miniroot/trimcerts.awk
new file mode 100644
index 00000000000..8042d1b8615
--- /dev/null
+++ b/distrib/miniroot/trimcerts.awk
@@ -0,0 +1,35 @@
+#	$OpenBSD: trimcerts.awk,v 1.1 2018/03/21 18:53:24 sthen Exp $
+
+#
+#	read in a formatted list of X509 certificates with long decodes,
+#	output only short comments plus the certificates themselves
+#
+
+BEGIN {
+	if (ARGC != 3) {
+		print "usage: awk -f trimcert.awk cert.pem outputfile";
+		bad=1;
+		exit 1;
+	}
+	ARGC=2;
+	incert=0;
+}
+
+{
+	if ($0 ~ /^-----BEGIN CERTIFICATE-----/) {
+		incert=1;
+	}
+	if ($0 ~ /^#/ || incert) {
+		print $0 > ARGV[2];
+	}
+	if ($0 ~ /^-----END CERTIFICATE-----/) {
+		incert=0;
+	}
+}
+
+END {
+	if (!bad) {
+		system("chmod 444 " ARGV[2]);
+		system("chown root:bin " ARGV[2]);
+	}
+}