#!/bin/sh

set -e

#DEBHELPER#

case "$1" in
  configure)
    if [ ! -f "/etc/rdpgw/server.pem" ]; then
        random=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1)
        openssl genrsa -des3 -passout pass:$random -out /tmp/server.pass.key 2048 
        openssl rsa -passin pass:$random -in /tmp/server.pass.key -out /etc/rdpgw/key.pem
        rm /tmp/server.pass.key
        openssl req -new -sha256 -key /etc/rdpgw/key.pem -out /etc/rdpgw/server.csr -subj "/C=US/ST=VA/L=SomeCity/O=MyCompany/OU=MyDivision/CN=rdpgw"
        openssl x509 -req -days 365 -in /etc/rdpgw/server.csr -signkey /etc/rdpgw/key.pem -out /etc/rdpgw/server.pem
    fi
    deb-systemd-invoke reload-or-try-restart rdpgw-auth.service || true 
    deb-systemd-invoke reload-or-try-restart rdpgw.service || true 
    ;;

esac