diff options
author | 2003-11-29 09:28:10 +0000 | |
---|---|---|
committer | 2003-11-29 09:28:10 +0000 | |
commit | 74b1255dbe67c8dda642ea67174da96b8d0655a9 (patch) | |
tree | 7f589179aaea09a4317fb3bea431df036ce67fc2 /net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh | |
parent | new revision, major changes. now integerates -r13 of main qmail package. bug ... (diff) | |
download | historical-74b1255dbe67c8dda642ea67174da96b8d0655a9.tar.gz historical-74b1255dbe67c8dda642ea67174da96b8d0655a9.tar.bz2 historical-74b1255dbe67c8dda642ea67174da96b8d0655a9.zip |
new revision, major changes. now integerates -r13 of main qmail package. bug #20899 fixed. package hardmasked for more testing
Diffstat (limited to 'net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh')
-rw-r--r-- | net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh b/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh new file mode 100644 index 000000000000..f292aff545a5 --- /dev/null +++ b/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh @@ -0,0 +1,33 @@ +#!/bin/bash +# $Header: /var/cvsroot/gentoo-x86/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh,v 1.1 2003/11/29 09:28:09 robbat2 Exp $ +# Robin H. Johnson <robbat2@gentoo.org> - October 17, 2003 +# This file generates the static temporary RSA keys needed for qmail to encrypt messages +# It should be run from a crontab, once a day is ok on low load machines, but +# if you do lots of mail, once per hour is more reasonable +# if you do NOT create the rsa512.pem, qmail will generate it on the fly for +# each connection, which can be VERY slow. + +if [ -z "${ROOT}" -o "${ROOT}" = "/" ]; then +confdir=/var/qmail/control +else +confdir=${ROOT}/var/qmail/control +fi +pemfile="${confdir}/rsa512.pem" +tmpfile="${confdir}/rsa512.pem.tmp" + +# this is the number of bits in the key +# it should be a power of 2 ideally +# and it must be more than 64! +bits="512" + +# the key should be 0600 +# which is readable by qmaild only! +umaskvalue="0077" +uid="qmaild" +gid="qmail" + +umask ${umaskvalue} ; +# we need to make sure that all of the operations succeed +/usr/bin/openssl genrsa -out ${tmpfile} ${bits} 2>/dev/null && \ +/bin/chown ${uid}:${gid} ${tmpfile} && \ +/bin/mv -f ${tmpfile} ${pemfile} |