Add PX5G Keymaster

2 files changed, 20 insertions, 0 deletions

diff --git a/libs/px5g/root/etc/uci-defaults/px5g b/libs/px5g/root/etc/uci-defaults/px5g
new file mode 100755
index 0000000000..ba1ec63412
--- /dev/null
+++ b/libs/px5g/root/etc/uci-defaults/px5g
@@ -0,0 +1,2 @@
+#!/bin/sh
+px5g-genkeys
diff --git a/libs/px5g/root/usr/sbin/px5g-genkeys b/libs/px5g/root/usr/sbin/px5g-genkeys
new file mode 100755
index 0000000000..29906577f3
--- /dev/null
+++ b/libs/px5g/root/usr/sbin/px5g-genkeys
@@ -0,0 +1,18 @@
+#!/usr/bin/lua
+local keyfile = "/etc/nixio/rsa_main.der"
+local certfile = "/etc/nixio/cert_main.der"
+
+local px5g = require "px5g"
+local nixio = require "nixio"
+local fs = require "nixio.fs"
+local os = require "os"
+
+if not fs.access(certfile) then
+	local key = px5g.genkey(2048)
+	fs.writefile(keyfile, key:asn1())
+
+	local cert = key:create_selfsigned(
+		{CN=nixio.uname().nodename, O="LuCI Keymaster"},
+		os.time(), os.time() + 3600 * 24 * 366 * 15)
+	fs.writefile(certfile, cert)
+end