1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
|
#!/bin/sh
set -e
case "$1" in
configure)
;;
abort-upgrade|abort-remove|abort-deconfigure)
;;
*)
echo "postinst called with unknown argument \`$1'" >&2
exit 1
;;
esac
# add the user and group for dkimproxy to operate
addgroup --system dkimproxy
adduser --system dkimproxy --ingroup dkimproxy --home /var/lib/dkimproxy --no-create-home
# if we don't have a private key yet in /var/lib/dkimproxy/private.key, generate a private and public key
if [ ! -e /var/lib/dkimproxy/private.key ]; then
openssl genrsa -out /var/lib/dkimproxy/private.key 1024
openssl rsa -in /var/lib/dkimproxy/private.key -pubout -out /var/lib/dkimproxy/public.key
fi
# Make sure it's not world readable, but still accessible by both dkimproxy and the ssl-cert group
chmod 644 /var/lib/dkimproxy/public.key
chmod 640 /var/lib/dkimproxy/private.key
if getent group ssl-cert >/dev/null ; then
adduser dkimproxy ssl-cert || true
chown dkimproxy:ssl-cert /var/lib/dkimproxy/public.key /var/lib/dkimproxy/private.key
else
chown dkimproxy:dkimproxy /var/lib/dkimproxy/public.key /var/lib/dkimproxy/private.key
fi
#DEBHELPER#
exit 0
|
