PREIN

/bin/sh

getent group eucaconsole >/dev/null || groupadd -r eucaconsole
getent passwd eucaconsole >/dev/null || \
    useradd -r -g eucaconsole -d /etc/eucalyptus-console \
    -c 'Eucalyptus Console' eucaconsole

PREUN

/bin/sh

if [ $1 -eq 0 ] ; then 
        # Package removal, not upgrade 
        /usr/bin/systemctl --no-reload disable eucalyptus-console.service > /dev/null 2>&1 || : 
        /usr/bin/systemctl stop eucalyptus-console.service > /dev/null 2>&1 || : 
fi

POSTIN

/bin/sh

if [ $1 -eq 1 ] ; then 
        # Initial installation 
        /usr/bin/systemctl preset eucalyptus-console.service >/dev/null 2>&1 || : 
fi 
umask 077

if [ -f /etc/eucalyptus-console/console.key -o -f /etc/eucalyptus-console/console.crt ]; then
   exit 0
fi

/usr/bin/openssl genrsa -rand /proc/apm:/proc/cpuinfo:/proc/dma:/proc/filesystems:/proc/interrupts:/proc/ioports:/proc/pci:/proc/rtc:/proc/uptime 1024 > /etc/eucalyptus-console/console.key 2> /dev/null

cn=$( getent hosts $(hostname) | awk '{ print $2 }' )
if [ -z "$cn" ]; then
    cn=$(hostname)
    if [ -z "$cn" ]; then
        cn=localhost.localdomain
    fi
fi

cat <<EOF | /usr/bin/openssl req -new -key /etc/eucalyptus-console/console.key \
         -x509 -days 365 -set_serial $RANDOM -extensions v3_req \
         -out /etc/eucalyptus-console/console.crt 2>/dev/null
US
CA
"Santa Barbara"
"Eucalyptus Systems, Inc."
"Eucalyptus User Console"
$cn
eucaconsole@$cn
EOF

chown eucaconsole:eucaconsole /etc/eucalyptus-console/console.crt
chown eucaconsole:eucaconsole /etc/eucalyptus-console/console.key