blob: 3bc1df19063231aa49b241e456c96fdad1f923fd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
#! @SHELL@
#
#
# Copyright 2000-2007 Double Precision, Inc. See COPYING for
# distribution information.
#
# This is a short script to quickly generate a self-signed X.509 key for
# IMAP over SSL. Normally this script would get called by an automatic
# package installation routine.
if test "@ssllib@" = "openssl"
then
test -x @OPENSSL@ || exit 0
else
test -x @CERTTOOL@ || exit 0
fi
prefix="@prefix@"
if test -f @certsdir@/imapd.pem
then
echo "@certsdir@/imapd.pem already exists."
exit 1
fi
umask 077
set -e
BITS="$BITS"
cleanup() {
rm -f @certsdir@/imapd.pem
rm -f @certsdir@/imapd.rand
rm -f @certsdir@/imapd.key
rm -f @certsdir@/imapd.cert
exit 1
}
cd @certsdir@
if test "@ssllib@" = "openssl"
then
cp /dev/null @certsdir@/imapd.pem
chmod 600 @certsdir@/imapd.pem
chown @mailuser@ @certsdir@/imapd.pem
dd if=@RANDOMV@ of=@certsdir@/imapd.rand count=1 2>/dev/null
@OPENSSL@ req -new -x509 -days 365 -nodes \
-config @sysconfdir@/imapd.cnf -out @certsdir@/imapd.pem -keyout @certsdir@/imapd.pem || cleanup
@OPENSSL@ x509 -subject -dates -fingerprint -noout -in @certsdir@/imapd.pem || cleanup
rm -f @certsdir@/imapd.rand
else
if test "$BITS" = ""
then
BITS="high"
fi
cp /dev/null @certsdir@/imapd.key
chmod 600 @certsdir@/imapd.key
cp /dev/null @certsdir@/imapd.cert
chmod 600 @certsdir@/imapd.cert
cp /dev/null @certsdir@/imapd.pem
chmod 600 @certsdir@/imapd.pem
chown @mailuser@ @certsdir@/imapd.pem
cp /dev/null @certsdir@/imapd.pem
cp /dev/null @certsdir@/imapd.cert
cp /dev/null @certsdir@/imapd.key
@CERTTOOL@ --generate-privkey --sec-param=$BITS --outfile imapd.key
@CERTTOOL@ --generate-self-signed --load-privkey imapd.key --outfile imapd.cert --template @sysconfdir@/imapd.cnf
cat imapd.key imapd.cert >imapd.pem
rm -f imapd.key imapd.cert
fi
|
