Generate the VNC token key at invirt-vnc-server install-time instead

[invirt/packages/invirt-vnc-server.git] / debian / invirt-vnc-server.postinst

diff --git a/debian/invirt-vnc-server.postinst b/debian/invirt-vnc-server.postinst
old mode 100644 (file)
new mode 100755 (executable)
index c7e3d1f..ee266d9
--- a/debian/invirt-vnc-server.postinst
+++ b/debian/invirt-vnc-server.postinst
@@ -23,6 +23,10 @@ case "$1" in
        if [ -z "$2" ]; then
            echo "Please be sure to copy vncproxy.crt and vncproxykey.pem into /usr/share/invirt-vnc-server/"
        fi
+        mkdir -p /etc/invirt/secrets
+        if ! [ -e /etc/invirt/secrets/vnc-key ]; then
+            openssl rand -base64 33 >/etc/invirt/secrets/vnc-key
+        fi
     ;;
 
     abort-upgrade|abort-remove|abort-deconfigure)