export LC_ALL=C

post_install() {
  local _mingw_prefix=ucrt64
  DEST=${_mingw_prefix}/etc/pki/ca-trust/extracted

  # OpenSSL PEM bundle that includes trust flags
  # (BEGIN TRUSTED CERTIFICATE)
  ${_mingw_prefix}/bin/p11-kit extract --format=openssl-bundle --filter=certificates --overwrite $DEST/openssl/ca-bundle.trust.crt
  ${_mingw_prefix}/bin/p11-kit extract --format=pem-bundle --filter=ca-anchors --overwrite --purpose server-auth $DEST/pem/tls-ca-bundle.pem
  ${_mingw_prefix}/bin/p11-kit extract --format=pem-bundle --filter=ca-anchors --overwrite --purpose email $DEST/pem/email-ca-bundle.pem
  ${_mingw_prefix}/bin/p11-kit extract --format=pem-bundle --filter=ca-anchors --overwrite --purpose code-signing $DEST/pem/objsign-ca-bundle.pem
  ${_mingw_prefix}/bin/p11-kit extract --format=java-cacerts --filter=ca-anchors --overwrite --purpose server-auth $DEST/java/cacerts

  mkdir -p ${_mingw_prefix}/ssl/certs
  cp -f $DEST/pem/tls-ca-bundle.pem ${_mingw_prefix}/ssl/certs/ca-bundle.crt
  cp -f $DEST/pem/tls-ca-bundle.pem ${_mingw_prefix}/ssl/cert.pem
  cp -f $DEST/openssl/ca-bundle.trust.crt ${_mingw_prefix}/ssl/certs/ca-bundle.trust.crt

  #${_mingw_prefix}/bin/update-ca-trust >/dev/null 2>&1
}

post_upgrade() {
  post_install
}