41 lines
847 B
Bash
41 lines
847 B
Bash
#!/bin/sh
|
|
|
|
# Generates a self-signed certificate.
|
|
# Edit dovecot-openssl.cnf before running this.
|
|
|
|
OPENSSL=openssl
|
|
#SSLDIR=/etc/ssl
|
|
SSLDIR=.
|
|
OPENSSLCONFIG=rc_mmngd-openssl.cnf
|
|
|
|
CERTDIR=$SSLDIR/certs
|
|
KEYDIR=$SSLDIR/private
|
|
|
|
CERTFILE=$CERTDIR/rc_mmngd_CA.pem
|
|
KEYFILE=$KEYDIR/rc_mmngd_privkey.pem
|
|
|
|
if [ ! -d $CERTDIR ]; then
|
|
echo "$SSLDIR/certs directory doesn't exist"
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -d $KEYDIR ]; then
|
|
echo "$SSLDIR/private directory doesn't exist"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -f $CERTFILE ]; then
|
|
echo "$CERTFILE already exists, won't overwrite"
|
|
exit 1
|
|
fi
|
|
|
|
if [ -f $KEYFILE ]; then
|
|
echo "$KEYFILE already exists, won't overwrite"
|
|
exit 1
|
|
fi
|
|
|
|
$OPENSSL req -new -x509 -nodes -config $OPENSSLCONFIG -out $CERTFILE -keyout $KEYFILE -days 365 || exit 2
|
|
chmod 0600 $KEYFILE
|
|
echo
|
|
$OPENSSL x509 -subject -fingerprint -noout -in $CERTFILE || exit 2
|