#!/bin/rc

# This script removes a DKIM keypair generated by dkim/mkcert

dir      = /etc/mail/dkim
user     = _dkimsign
selector = $1
privkey  = $dir/$selector.priv.key
pubkey   = $dir/$selector.pub.key
txt      = $dir/$selector.txt

fn err {
	echo $* >[1=2]
}

fn as {
	doas -u $user $*
}

fn removeif-e {
	if (as test -e $1) {
		if (as rm $1) {
			removed = ($removed $1)
		} else {
			failed = ($failed $1)
		}
	}
}

if (!~ $#* 1) {
	echo 'usage: mkcert <selector>'
	exit 2
}

removeif-e $privkey
removeif-e $pubkey
removeif-e $txt

if (~ $removed () && ~ $failed ()) {
	err no such selector: $selector
	exit 1
}

if (!~ $removed ()) {
	err removed: $removed
}

if (!~ $failed ()) {
	err failed to remove: $failed
	exit 1
}