#!/bin/sh
set -eu

test -f /pki/server.pem && test -f /pki/server-key.pem && exit 0
apk add --no-cache openssl
umask 077
openssl genrsa -out /pki/server-key.pem 2048
openssl req -x509 -new -key /pki/server-key.pem -sha256 -days 2 \
    -subj "/CN=${RVBOX_NATIVE_ENDPOINT_HOST:?}" \
    -addext "subjectAltName=DNS:${RVBOX_NATIVE_ENDPOINT_HOST}" \
    -out /pki/server.pem
chmod 600 /pki/*key.pem
chmod 644 /pki/server.pem