#!/bin/bash

. /etc/sysconfig/network

# Source exim configureation.
if [ -f /etc/sysconfig/exim ] ; then
        . /etc/sysconfig/exim
fi

USER=${USER:=exim}
GROUP=${GROUP:=exim}

gen_cert() {
        if [ ! -f /etc/pki/tls/certs/exim.pem ] ; then
                umask 077
                FQDN=`hostname`
                if [ "x${FQDN}" = "x" ]; then
                        FQDN=localhost.localdomain
                fi
                echo -n $"Generating exim certificate: "
                cat << EOF | openssl req -new -x509 -days 365 -nodes \
                        -out /etc/pki/tls/certs/exim.pem \
                        -keyout /etc/pki/tls/private/exim.pem &>/dev/null
--
SomeState
SomeCity
SomeOrganization
SomeOrganizationalUnit
${FQDN}
root@${FQDN}
EOF
                if [ $? -eq 0 ]; then
                        echo success
                        chown $USER:$GROUP /etc/pki/tls/{private,certs}/exim.pem
                        chmod 600 /etc/pki/tls/{private,certs}/exim.pem
                else
                        echo failure
                fi
                echo
        fi
}

gen_cert

exit 0