%PDF- %PDF-
Direktori : /usr/local/sbin/ |
Current File : //usr/local/sbin/mkimapdcert |
#! /bin/sh # # # Copyright 2000-2007 Double Precision, Inc. See COPYING for # distribution information. # # This is a short script to quickly generate a self-signed X.509 key for # IMAP over SSL. Normally this script would get called by an automatic # package installation routine. if test "openssl" = "openssl" then test -x /usr/bin/openssl || exit 0 else test -x /usr/local/bin/certtool || exit 0 fi prefix="/usr/local" if test -f /usr/local/share/courier-imap/imapd.pem then echo "/usr/local/share/courier-imap/imapd.pem already exists." exit 1 fi umask 077 set -e BITS="$BITS" cleanup() { rm -f /usr/local/share/courier-imap/imapd.pem rm -f /usr/local/share/courier-imap/imapd.rand rm -f /usr/local/share/courier-imap/imapd.key rm -f /usr/local/share/courier-imap/imapd.cert exit 1 } cd /usr/local/share/courier-imap if test "openssl" = "openssl" then cp /dev/null /usr/local/share/courier-imap/imapd.pem chmod 600 /usr/local/share/courier-imap/imapd.pem chown root /usr/local/share/courier-imap/imapd.pem dd if=/dev/urandom of=/usr/local/share/courier-imap/imapd.rand count=1 2>/dev/null /usr/bin/openssl req -new -x509 -days 365 -nodes \ -config /usr/local/etc/courier-imap/imapd.cnf -out /usr/local/share/courier-imap/imapd.pem -keyout /usr/local/share/courier-imap/imapd.pem || cleanup /usr/bin/openssl x509 -subject -dates -fingerprint -noout -in /usr/local/share/courier-imap/imapd.pem || cleanup rm -f /usr/local/share/courier-imap/imapd.rand else if test "$BITS" = "" then BITS="high" fi cp /dev/null /usr/local/share/courier-imap/imapd.key chmod 600 /usr/local/share/courier-imap/imapd.key cp /dev/null /usr/local/share/courier-imap/imapd.cert chmod 600 /usr/local/share/courier-imap/imapd.cert cp /dev/null /usr/local/share/courier-imap/imapd.pem chmod 600 /usr/local/share/courier-imap/imapd.pem chown root /usr/local/share/courier-imap/imapd.pem cp /dev/null /usr/local/share/courier-imap/imapd.pem cp /dev/null /usr/local/share/courier-imap/imapd.cert cp /dev/null /usr/local/share/courier-imap/imapd.key /usr/local/bin/certtool --generate-privkey --sec-param=$BITS --outfile imapd.key /usr/local/bin/certtool --generate-self-signed --load-privkey imapd.key --outfile imapd.cert --template /usr/local/etc/courier-imap/imapd.cnf cat imapd.key imapd.cert >imapd.pem rm -f imapd.key imapd.cert fi