#! /bin/bash
set -xe

moddir=$1
which_sign=0
echo "----module signature----"
if grep "%openeuler_sign_rsa 1" $HOME/.rpmmacros
then
    which_sign=1
fi

if [ $which_sign -eq 1 ];then
    for file in $(find $moddir -type f -name '*.ko'); then
        sh /usr/lib/rpm/brp-ebs-sign --module $file
    done
    if [ $? -eq 1 ];then
        exit 1
    fi
else
    modules=`find $moddir -name *.ko`

    MODSECKEY="./signing_key.pem"
    MODPUBKEY="./signing_key.x509"

    for mod in $modules
    do
        dir=`dirname $mod`
        file=`basename $mod`

        ./scripts/sign-file sha256 ${MODSECKEY} ${MODPUBKEY} ${dir}/${file}
        rm -f ${dir}/${file}.{sig,dig}
    done

    RANDOMMOD=$(find $moddir -type f -name '*.ko' | sort -R | tail -n 1)
    if [ "~Module signature appended~" != "$(tail -c 28 $RANDOMMOD)" ]; then
        echo "*** Modules are unsigned! ***"
        exit 1
    fi
fi

exit 0