tools/genssl.in

   1 #!/bin/sh
   2 prefix="@prefix@"
   3 exec_prefix="@exec_prefix@"
   4 sysconfdir="@sysconfdir@"
   5
   6 echo "Generating self-signed certificate .. "
   7 openssl req -x509 -nodes -newkey rsa:1024 -keyout "${sysconfdir}"/ssl.key -out "${sysconfdir}"/ssl.cert
   8
   9 echo "Generating Diffie-Hellman file for secure SSL/TLS negotiation .. "
  10 openssl dhparam -out "${sysconfdir}"/dh.pem 2048
  11
  12 # If sysconfdir is relative to prefix, make the path relative. I.e.,
  13 # prefix=/usr and sysconfdir=/etc -> relative_sysconfdir=/etc,
  14 # prefix=/home/binki/chary and sysconfdir=/home/binki/chary/etc ->
  15 # relative_sysconfdir=etc
  16 relative_sysconfdir="${sysconfdir#${prefix%/}/}"
  17 relative_sysconfdir="${relative_sysconfdir%/}"
  18
  19 cat <<EOF
  20
  21
  22 Now change these lines in the IRCd config file:
  23
  24     ssl_private_key = "${relative_sysconfdir}/ssl.key";
  25     ssl_cert = "${relative_sysconfdir}/ssl.cert";
  26     ssl_dh_params = "${relative_sysconfdir}/dh.pem";
  27
  28 Enjoy using ssl.
  29 EOF