From ecfa105982ef988f52cdc60dd0204e5ded55d955 Mon Sep 17 00:00:00 2001
From: "cam.lafit" <alternc@webelys.com>
Date: Sat, 23 Jun 2018 11:00:45 +0200
Subject: [PATCH] Provide a snakeoil certificate

* By default AlternC will use a snakeoil certificate
* Is set as default as 0 id to failback when no certificate provider can
set a certificate
---
 install/alternc.install | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/install/alternc.install b/install/alternc.install
index 95060b7c..1da606a2 100644
--- a/install/alternc.install
+++ b/install/alternc.install
@@ -289,6 +289,22 @@ else
     ln -fs /etc/alternc/alternc.ini /etc/php$php/cli/conf.d/alternc.ini || true
 fi
 
+#Set a default certificate if needed
+make-ssl-cert generate-default-snakeoil
+SNAKEOIL_SSLKEY=$(</etc/ssl/private/ssl-cert-snakeoil.key)
+SNAKEOIL_SSLCRT=$(</etc/ssl/certs/ssl-cert-snakeoil.pem)
+
+mysql_query "SET SESSION sql_mode=\"NO_AUTO_VALUE_ON_ZERO\" ; INSERT IGNORE INTO \
+    certificates (id,uid,status,fqdn,validstart,validend,sslkey,sslcrt,provider) \
+    VALUES \
+    (0,2000,1,\"ALTERNC_DEFAULT_FQDN\",NOW(),ADDDATE(NOW(),INTERVAL 200 YEAR),\"$SNAKEOIL_SSLKEY\",\"$SNAKEOIL_SSLCRT\",\"snakeoil\");"
+
+if [ ! -e /etc/alternc/apache.pem ]; then
+    echo -e "$SNAKEOIL_SSLKEY\n$SNAKEOIL_SSLCRT" > /etc/alternc/apache.pem
+fi
+
+run-parts --arg=certificates /usr/lib/alternc/install.d
+
 if [ -x /usr/sbin/apache2 ]; then
     # hook 
     run-parts --arg=apache2 /usr/lib/alternc/install.d