From b92e6532a0237b7b13e29c6c0c55943fc1cd7d77 Mon Sep 17 00:00:00 2001
From: Steven Barth <steven@midlink.org>
Date: Wed, 4 Mar 2009 17:17:30 +0000
Subject: nixio: Autogenerate private key on installation if we have axtls
 support, make the TLS provider configurable in the build menu

---
 libs/nixio/Makefile                                 |  2 ++
 libs/nixio/axtls-root/etc/uci-defaults/nixio        |  2 ++
 libs/nixio/axtls-root/usr/sbin/nixio-axtls-checkkey | 20 ++++++++++++++++++++
 libs/nixio/ipkg/postinst                            |  4 ++++
 4 files changed, 28 insertions(+)
 create mode 100755 libs/nixio/axtls-root/etc/uci-defaults/nixio
 create mode 100755 libs/nixio/axtls-root/usr/sbin/nixio-axtls-checkkey
 create mode 100755 libs/nixio/ipkg/postinst

(limited to 'libs')

diff --git a/libs/nixio/Makefile b/libs/nixio/Makefile
index d58162fcd..df63dc183 100644
--- a/libs/nixio/Makefile
+++ b/libs/nixio/Makefile
@@ -39,6 +39,8 @@ src/tls-socket.o: $(TLS_DEPENDS) src/tls-socket.c
 	
 src/openssl-compat.o: src/libaxtls.a src/openssl-compat.c
 	$(COMPILE) $(NIXIO_CFLAGS) $(LUA_CFLAGS) $(FPIC) $(TLS_CFLAGS) -c -o $@ src/openssl-compat.c
+	mkdir -p dist
+	cp -pR axtls-root/* dist/
 	
 
 compile: $(NIXIO_OBJ)
diff --git a/libs/nixio/axtls-root/etc/uci-defaults/nixio b/libs/nixio/axtls-root/etc/uci-defaults/nixio
new file mode 100755
index 000000000..4f342628a
--- /dev/null
+++ b/libs/nixio/axtls-root/etc/uci-defaults/nixio
@@ -0,0 +1,2 @@
+#!/bin/sh
+nixio-axtls-checkkey
diff --git a/libs/nixio/axtls-root/usr/sbin/nixio-axtls-checkkey b/libs/nixio/axtls-root/usr/sbin/nixio-axtls-checkkey
new file mode 100755
index 000000000..994f24e7b
--- /dev/null
+++ b/libs/nixio/axtls-root/usr/sbin/nixio-axtls-checkkey
@@ -0,0 +1,20 @@
+#!/usr/bin/lua
+local nixio = require "nixio"
+local posix
+local defkey = nixio.meta_tls_context.tls_defaultkey
+if not defkey or io.open(defkey) then
+	os.exit(0)
+end
+
+if os.execute("which openssl") then
+	io.stderr:write("Warning: OpenSSL detected "..
+	"but it looks like nixio was linked against axtls\n")
+	os.execute("umask 0077;openssl genrsa -out '" .. defkey .. "' 2048")
+elseif os.execute("which dropbearkey && which dropbearconvert") then
+	os.execute("dropbearkey -t rsa -s 2048 -f /tmp/dbkey.rsa")
+	os.execute("umask 0077;dropbearconvert dropbear openssh /tmp/dbkey.rsa '"..defkey.."'")
+	os.remove("/tmp/dbkey.rsa")
+else
+	io.stderr:write("No key generators available! Giving up.")
+	os.exit(1)
+end
diff --git a/libs/nixio/ipkg/postinst b/libs/nixio/ipkg/postinst
new file mode 100755
index 000000000..0863c22a3
--- /dev/null
+++ b/libs/nixio/ipkg/postinst
@@ -0,0 +1,4 @@
+#!/bin/sh
+[ -n "${IPKG_INSTROOT}" -a -f "/etc/uci-defaults/nixio" ] || {
+	( . /etc/uci-defaults/nixio ) && rm -f /etc/uci-defaults/nixio
+}
-- 
cgit v1.2.3