#!/bin/bash

fail()
{
	echo "installation failed: $*"
	exit 1
}

test -f certgen.conf || exit 1
test -f /etc/ggrelay/ggrelay.conf || exit 1

if grep ssl-key /etc/ggrelay/ggrelay.conf >&/dev/null; then
	echo "SSL is already set up for ggrelay."
	exit 1
fi

read -p "Configure SSL cryptography [not recommended, highly experimental] (y/n)? " CONFSSL
if test "x$CONFSSL" = "xy"; then
	umask 077
	echo "Generating cryptographic key and certificate ..."
	openssl req -x509 -newkey rsa:1024 -keyout /etc/ggrelay/key.pem \
		-nodes -out /etc/ggrelay/cert.pem -config certgen.conf || fail "error generating certs"
	echo "--ssl-key /etc/ggrelay/key.pem" >> /etc/ggrelay/ggrelay.conf
	echo "--ssl-cert /etc/ggrelay/cert.pem" >> /etc/ggrelay/ggrelay.conf
fi

exit 0
