Merge pull request #89 from lafriks/feat/autocert

Add support for automatic self-signec cert generation

Author: stilliard

README.md

@@ -270,6 +270,14 @@ openssl req -x509 -nodes -newkey rsa:2048 -sha256 -keyout \
 chmod 600 /etc/ssl/private/*.pem
 ```
 
+Automatic TLS certificate generation
+------------------------------
+
+If `ADDED_FLAGS` contains `--tls` and file `/etc/ssl/private/pure-ftpd.pem` does not exists
+it is possible to generate self-signed certificate if `TLS_CN`, `TLS_ORG` and `TLS_C` are set.
+
+Keep in mind that if no volume is set for `/etc/ssl/private/` directory generated
+certificates won't be persisted and new ones will be generated on each start.
 
 Credits
 -------------

run.sh

@@ -26,6 +26,19 @@ then
     PURE_FTPD_FLAGS="$PURE_FTPD_FLAGS --tls=1 "
 fi
 
+# If TLS flag is set and no certificate exists, generate it
+if [ ! -e /etc/ssl/private/pure-ftpd.pem ] && [[ "$PURE_FTPD_FLAGS" == *"--tls"* ]] && [ ! -z "$TLS_CN" ] && [ ! -z "$TLS_ORG" ] && [ ! -z "$TLS_C" ]
+then
+    echo "Generating self-signed certificate"
+    mkdir -p /etc/ssl/private
+    openssl dhparam -out /etc/ssl/private/pure-ftpd-dhparams.pem 2048
+    openssl req -subj "/CN=${TLS_CN}/O=${TLS_ORG}/C=${TLS_C}" -days 1826 \
+        -x509 -nodes -newkey rsa:2048 -sha256 -keyout \
+        /etc/ssl/private/pure-ftpd.pem \
+        -out /etc/ssl/private/pure-ftpd.pem
+    chmod 600 /etc/ssl/private/*.pem
+fi
+
 # Add user
 if [ ! -z "$FTP_USER_NAME" ] && [ ! -z "$FTP_USER_PASS" ] && [ ! -z "$FTP_USER_HOME" ]
 then