X-Git-Url: https://ruderich.org/simon/gitweb/?a=blobdiff_plain;f=src%2Ftlsproxy-setup;h=d76c998689454c38d004a93d304f00aa932302ee;hb=1af69c9609af41165498e7a1bfda3f32744f12fe;hp=ff5d3bdf3baab3cdadde90a4f6f69f0eeb9f5b37;hpb=2768e020f19f47e0d31ed883698a5aba1ad9d3a8;p=tlsproxy%2Ftlsproxy.git

diff --git a/src/tlsproxy-setup b/src/tlsproxy-setup
index ff5d3bd..d76c998 100755
--- a/src/tlsproxy-setup
+++ b/src/tlsproxy-setup
@@ -22,12 +22,18 @@
 
 set -e
 
+
+if test "$#" -ne 0; then
+    echo "Usage: $0"
+    exit 1
+fi
+
 tempfile=`mktemp`
 trap 'rm -f "$tempfile"' EXIT
 
 # Generate proxy CA key file.
 certtool --generate-privkey \
-         --sec-param=high \
+         --sec-param high \
          --outfile proxy-ca-key.pem
 # Generate proxy CA.
 echo 'cn = tlsproxy CA' > "$tempfile"
@@ -41,7 +47,7 @@ certtool --generate-self-signed \
 
 # Generate proxy key file.
 certtool --generate-privkey \
-         --sec-param=high \
+         --sec-param high \
          --outfile proxy-key.pem
 
 # Generate proxy "invalid" server certificate. It's used for problematic
@@ -59,4 +65,9 @@ certtool --generate-self-signed \
 
 rm "$tempfile"
 
+# Generate proxy Diffie-Hellman parameters.
+certtool --generate-dh-params \
+         --sec-param high \
+         --outfile proxy-dh.pem
+
 echo done