[Pkg-voip-commits] [resiprocate] 14/14: Generate dh512.pem on install

Daniel Pocock pocock at moszumanska.debian.org
Sun Jan 12 10:44:38 UTC 2014


This is an automated email from the git hooks/post-receive script.

pocock pushed a commit to branch master
in repository resiprocate.

commit 0c1d99eecd225b9f52a25c45017fd3033256e5c3
Author: Daniel Pocock <daniel at pocock.com.au>
Date:   Sun Jan 12 09:51:50 2014 +0100

    Generate dh512.pem on install
---
 debian/conf/reTurnServer.config         | 2 +-
 debian/resiprocate-turn-server.postinst | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/debian/conf/reTurnServer.config b/debian/conf/reTurnServer.config
index 34ac582..b5b8348 100644
--- a/debian/conf/reTurnServer.config
+++ b/debian/conf/reTurnServer.config
@@ -229,7 +229,7 @@ TlsServerPrivateKeyFilename = server-key.pem
 #
 #     openssl dhparam -outform PEM -out dh512.pem 512
 #
-TlsTempDhFilename = dh512.pem
+TlsTempDhFilename = /etc/reTurnServer-dh512.pem
 
 # TLS server private key certificate password required to read
 # from PEM file.  Leave blank if key is not encrypted.
diff --git a/debian/resiprocate-turn-server.postinst b/debian/resiprocate-turn-server.postinst
index f8857cd..ad675b4 100644
--- a/debian/resiprocate-turn-server.postinst
+++ b/debian/resiprocate-turn-server.postinst
@@ -35,6 +35,13 @@ install() {
                "$RETURN_USER" || exit 1
     fi
 
+    DH_PARAM_FILE=/etc/reTurnServer-dh512.pem
+    if [ ! -f ${DH_PARAM_FILE} ];
+    then
+        echo "Generating DH parameters..."
+        openssl dhparam -outform PEM -out ${DH_PARAM_FILE} 512 > /dev/null
+    fi
+
 }
 
 case "$1" in

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-voip/resiprocate.git



More information about the Pkg-voip-commits mailing list