test -x /usr/bin/openssl || exit 0
source /etc/init.d/functions.sh || exit 1
filedir="/var/qmail/control"
pemfile="${filedir}/servercert.pem"
randfile="${filedir}/servercert.rand"
conffile="${filedir}/servercert.cnf"
mode="0640"
uid="qmaild"
gid="qmail"
days="365"
if test -f $pemfile
then
eerror "$pemfile already exists."
exit 1
fi
ewarn "Please customize ${conffile} before continuing!"
einfo "Press ENTER to continue, or CTRL-C to stop now."
read
cp /dev/null $pemfile
chmod 600 $pemfile
chown root $pemfile
cleanup() {
rm -f $pemfile
rm -f $randfile
exit 1
}
dd if=/dev/urandom of=${randfile} bs=64 count=1 2>/dev/null
chmod 600 ${randfile}
einfo "Creating self-signed certificate"
/usr/bin/openssl req -new -x509 -days ${days} -nodes \
-config ${conffile} -out $pemfile -keyout $pemfile -rand ${randfile} || cleanup
einfo "Certificate details"
/usr/bin/openssl x509 -subject -dates -fingerprint -noout -in $pemfile || cleanup
chown ${uid}:${gid} ${pemfile}
chmod ${mode} ${pemfile}
ln -s ${pemfile} ${filedir}/clientcert.pem
rm -f $randfile