moved generateDH section and added missing DHPath after generate
This commit is contained in:
		
							parent
							
								
									b8111c1711
								
							
						
					
					
						commit
						4b54ba596c
					
				
							
								
								
									
										4
									
								
								.vscode/numbered-bookmarks.json
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										4
									
								
								.vscode/numbered-bookmarks.json
									
									
									
									
										vendored
									
									
								
							| @ -10,9 +10,9 @@ | ||||
| 				-1, | ||||
| 				-1, | ||||
| 				-1, | ||||
| 				607, | ||||
| 				-1, | ||||
| 				-1, | ||||
| 				-1 | ||||
| 				630 | ||||
| 			] | ||||
| 		} | ||||
| 	] | ||||
|  | ||||
							
								
								
									
										38
									
								
								setup.sh
									
									
									
									
									
								
							
							
						
						
									
										38
									
								
								setup.sh
									
									
									
									
									
								
							| @ -584,6 +584,25 @@ fi | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| ### notify user and generate DHParms if necessary | ||||
| if [ "${generateDH}" -eq 1 ]; then | ||||
|     echo -e "\n${mag}---------------------${norm}" | ||||
|     echo -e "${cyan}Generating DH-Parameters file... this may take a while${norm}" | ||||
|     # delete existing (likely default) dhparam.pem | ||||
|     rm -f /etc/ssl/certs/dhparam.pem | ||||
|     # generate 4096-bit DHParams and store in /etc/ssl/certs/dhparam.pem | ||||
|     openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096 | ||||
|     # verify non-zero length file generated | ||||
|     if [ -s "/etc/ssl/certs/dhparam.pem" ]; then | ||||
|         echo -e "${ok}-- dhparam.pem generated --${norm}" | ||||
|         # set DHParam to proper location | ||||
|         DHPath='/etc/ssl/certs/dhparam.pem' | ||||
|     else | ||||
|         echo -e "${err}-- error generating dhparam.pem --" | ||||
|         echo -e "you should manaully generate this file${norm}" | ||||
|     fi | ||||
| fi | ||||
| 
 | ||||
| ### Write configurations to template files | ||||
| # let user know what's happening | ||||
| echo -e "\n${mag}---------------------${norm}" | ||||
| @ -646,25 +665,6 @@ echo -e "\n${mag}---------------------${norm}" | ||||
| echo -e "${cyan}...Template files updated${norm}" | ||||
| 
 | ||||
| 
 | ||||
| # notify user and generate DHParms if necessary, otherwise end reporting section | ||||
| 
 | ||||
| if [ "${generateDH}" -eq 1 ]; then | ||||
|     echo -e "\n${mag}---------------------${norm}" | ||||
|     echo -e "${cyan}Generating DH-Parameters file... this may take a while${norm}" | ||||
|     # delete existing (likely default) dhparam.pem | ||||
|     rm -f /etc/ssl/certs/dhparam.pem | ||||
|     # generate 4096-bit DHParams and store in /etc/ssl/certs/dhparam.pem | ||||
|     openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096 | ||||
|     # verify non-zero length file generated | ||||
|     if [ -s "/etc/ssl/certs/dhparam.pem" ]; then | ||||
|         echo -e "${ok}-- dhparam.pem generated --${norm}" | ||||
|     else | ||||
|         echo -e "${err}-- error generating dhparam.pem --" | ||||
|         echo -e "you should manaully generate this file${norm}" | ||||
|     fi | ||||
| fi | ||||
| 
 | ||||
| 
 | ||||
| 
 | ||||
| # debug section | ||||
| echo -e "\n${mag}---------------------${norm}" | ||||
|  | ||||
		Loading…
	
		Reference in New Issue
	
	Block a user