summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRobin H. Johnson <robbat2@gentoo.org>2003-11-29 09:28:10 +0000
committerRobin H. Johnson <robbat2@gentoo.org>2003-11-29 09:28:10 +0000
commit74b1255dbe67c8dda642ea67174da96b8d0655a9 (patch)
tree7f589179aaea09a4317fb3bea431df036ce67fc2 /net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh
parentnew revision, major changes. now integerates -r13 of main qmail package. bug ... (diff)
downloadhistorical-74b1255dbe67c8dda642ea67174da96b8d0655a9.tar.gz
historical-74b1255dbe67c8dda642ea67174da96b8d0655a9.tar.bz2
historical-74b1255dbe67c8dda642ea67174da96b8d0655a9.zip
new revision, major changes. now integerates -r13 of main qmail package. bug #20899 fixed. package hardmasked for more testing
Diffstat (limited to 'net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh')
-rw-r--r--net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh33
1 files changed, 33 insertions, 0 deletions
diff --git a/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh b/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh
new file mode 100644
index 000000000000..f292aff545a5
--- /dev/null
+++ b/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh
@@ -0,0 +1,33 @@
+#!/bin/bash
+# $Header: /var/cvsroot/gentoo-x86/net-mail/qmail-mysql/files/1.03-r13/qmail-genrsacert.sh,v 1.1 2003/11/29 09:28:09 robbat2 Exp $
+# Robin H. Johnson <robbat2@gentoo.org> - October 17, 2003
+# This file generates the static temporary RSA keys needed for qmail to encrypt messages
+# It should be run from a crontab, once a day is ok on low load machines, but
+# if you do lots of mail, once per hour is more reasonable
+# if you do NOT create the rsa512.pem, qmail will generate it on the fly for
+# each connection, which can be VERY slow.
+
+if [ -z "${ROOT}" -o "${ROOT}" = "/" ]; then
+confdir=/var/qmail/control
+else
+confdir=${ROOT}/var/qmail/control
+fi
+pemfile="${confdir}/rsa512.pem"
+tmpfile="${confdir}/rsa512.pem.tmp"
+
+# this is the number of bits in the key
+# it should be a power of 2 ideally
+# and it must be more than 64!
+bits="512"
+
+# the key should be 0600
+# which is readable by qmaild only!
+umaskvalue="0077"
+uid="qmaild"
+gid="qmail"
+
+umask ${umaskvalue} ;
+# we need to make sure that all of the operations succeed
+/usr/bin/openssl genrsa -out ${tmpfile} ${bits} 2>/dev/null && \
+/bin/chown ${uid}:${gid} ${tmpfile} && \
+/bin/mv -f ${tmpfile} ${pemfile}