#!/bin/rc

# This script removes a DKIM keypair generated by dkim/mkcert

dir      = /etc/mail/dkim
user     = _dkimsign
selector = $1
ed       = ed25519
rsaprivkey  = $dir/$selector.priv.key
pubkey   = $dir/$selector.pub.key
txt      = $dir/$selector.txt

files = ( $dir/$selector.rsa.priv.key \
          $dir/$selector.rsa.pub.key  \
          $dir/$selector.rsa.txt      \
          $dir/$selector.$ed.priv.key \
          $dir/$selector.$ed.pub.key  \
          $dir/$selector.$ed.txt      )

fn err {
	echo $* >[1=2]
}

fn as {
	doas -u $user $*
}

fn removeif-e {
	if (as test -e $1) {
		if (as rm $1) {
			removed = ($removed $1)
		} else {
			failed = ($failed $1)
		}
	}
}

if (!~ $#* 1) {
	echo 'usage: mkcert <selector>'
	exit 2
}

for (f in $files) {
	removeif-e $f
}

if (~ $removed () && ~ $failed ()) {
	err no such selector: $selector
	exit 1
}

if (!~ $removed ()) {
	err removed: $removed
}

if (!~ $failed ()) {
	err failed to remove: $failed
	exit 1
}