#!/bin/sh
#
# $FreeBSD: ports/security/openssh-portable/files/openssh.in,v 1.2 2006/02/21 19:28:37 mnag Exp $
#
# PROVIDE: openssh
# REQUIRE: DAEMON
#
# Add the following lines to /etc/rc.conf to enable openssh:
#
# openssh_enable (bool):	Set it to "YES" to enable openssh.
#				Default is "NO".
# openssh_flags (flags):	Set extra flags to openssh.
#				Default is "". see sshd(1).
# openssh_pidfile (file):	Set full path to pid file.
#				Default is "/var/run/sshd.pid".
#

. %%RC_SUBR%%

name="openssh"
rcvar=${name}_enable

load_rc_config ${name}

: ${openssh_enable="NO"}
: ${openssh_pidfile="/var/run/sshd.pid"}

command=%%PREFIX%%/sbin/sshd
extra_commands="reload keygen"
start_precmd="${name}_checks"
restart_precmd="${name}_checks"
keygen_cmd="${name}_keygen"
pidfile=${openssh_pidfile}

openssh_keygen()
{
	if [ ! -f %%ETCSSH%%/ssh_host_key -o \
		! -f %%ETCSSH%%/ssh_host_dsa_key -o \
		! -f %%ETCSSH%%/ssh_host_rsa_key ]; then

		umask 022

		# Can't do anything if ssh is not installed
		[ -x %%PREFIX%%/bin/ssh-keygen ] || {
			err 1 "%%PREFIX%%/bin/ssh-keygen does not exist."
		}

		if [ -f %%ETCSSH%%/ssh_host_key ]; then
			echo "You already have an RSA host key" \
				"in %%ETCSSH%%/ssh_host_key"
			echo "Skipping protocol version 1 RSA Key Generation"
		else
			%%PREFIX%%/bin/ssh-keygen -t rsa1 -b 1024 \
				-f %%ETCSSH%%/ssh_host_key -N ''
		fi

		if [ -f %%ETCSSH%%/ssh_host_dsa_key ]; then
			echo "You already have a DSA host key" \
				"in %%ETCSSH%%/ssh_host_dsa_key"
			echo "Skipping protocol version 2 DSA Key Generation"
		else
			%%PREFIX%%/bin/ssh-keygen -t dsa \
				-f %%ETCSSH%%/ssh_host_dsa_key -N ''
		fi

		if [ -f %%ETCSSH%%/ssh_host_rsa_key ]; then
			echo "You already have a RSA host key" \
				"in %%ETCSSH%%/ssh_host_rsa_key"
			echo "Skipping protocol version 2 RSA Key Generation"
		else
			%%PREFIX%%/bin/ssh-keygen -t rsa \
				-f %%ETCSSH%%/ssh_host_rsa_key -N ''
		fi

	fi
}

openssh_checks()
{
	if checkyesno sshd_enable ; then
		err 1 "sshd_enable is set. Please set sshd_enable to NO in your rc.conf"
	fi

	run_rc_command keygen
	eval "${command} -t"
}

run_rc_command "$1"