21 lines
817 B
Bash
21 lines
817 B
Bash
#!/bin/sh
|
|
|
|
set -e
|
|
|
|
#DEBHELPER#
|
|
|
|
case "$1" in
|
|
configure)
|
|
if [ ! -f "/etc/rdpgw/server.pem" ]; then
|
|
random=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1)
|
|
openssl genrsa -des3 -passout pass:$random -out /tmp/server.pass.key 2048
|
|
openssl rsa -passin pass:$random -in /tmp/server.pass.key -out /etc/rdpgw/key.pem
|
|
rm /tmp/server.pass.key
|
|
openssl req -new -sha256 -key /etc/rdpgw/key.pem -out /etc/rdpgw/server.csr -subj "/C=US/ST=VA/L=SomeCity/O=MyCompany/OU=MyDivision/CN=rdpgw"
|
|
openssl x509 -req -days 365 -in /etc/rdpgw/server.csr -signkey /etc/rdpgw/key.pem -out /etc/rdpgw/server.pem
|
|
fi
|
|
deb-systemd-invoke reload-or-try-restart rdpgw-auth.service || true
|
|
deb-systemd-invoke reload-or-try-restart rdpgw.service || true
|
|
;;
|
|
|
|
esac |