0000: 23 21 20 2f 75 73 72 2f 62 69 6e 2f 65 6e 76 20 #! /usr/bin/env
0010: 73 68 0a 0a 62 69 74 73 3d 27 32 30 34 38 27 0a sh..bits='2048'.
0020: 0a 6f 70 65 6e 73 73 6c 5f 64 68 70 61 72 61 6d .openssl_dhparam
0030: 28 29 20 7b 0a 09 69 66 20 5b 20 2d 78 20 22 60 () {..if [ -x "`
0040: 77 68 69 63 68 20 6f 70 65 6e 73 73 6c 20 32 3e which openssl 2>
0050: 2f 64 65 76 2f 6e 75 6c 6c 60 22 20 5d 3b 20 74 /dev/null`" ]; t
0060: 68 65 6e 0a 09 09 6f 5f 6f 75 74 70 75 74 3d 22 hen...o_output="
0070: 60 6f 70 65 6e 73 73 6c 20 64 68 70 61 72 61 6d `openssl dhparam
0080: 20 2d 43 20 22 24 40 22 20 32 3e 2f 64 65 76 2f -C "$@" 2>/dev/
0090: 6e 75 6c 6c 60 22 20 7c 7c 20 72 65 74 75 72 6e null`" || return
00a0: 20 31 0a 09 09 6f 5f 6f 75 74 70 75 74 3d 22 60 1...o_output="`
00b0: 65 63 68 6f 20 22 24 7b 6f 5f 6f 75 74 70 75 74 echo "${o_output
00c0: 7d 22 20 7c 20 73 65 64 20 27 2f 5e 2d 2d 2d 2d }" | sed '/^----
00d0: 2d 42 45 47 49 4e 20 44 48 20 50 41 52 41 4d 45 -BEGIN DH PARAME
00e0: 54 45 52 53 2d 2d 2d 2d 2d 24 2f 2c 2f 5e 2d 2d TERS-----$/,/^--
00f0: 2d 2d 2d 45 4e 44 20 44 48 20 50 41 52 41 4d 45 ---END DH PARAME
0100: 54 45 52 53 2d 2d 2d 2d 2d 24 2f 20 64 3b 2f 5e TERS-----$/ d;/^
0110: 23 2f 20 64 27 60 22 20 7c 7c 20 72 65 74 75 72 #/ d'`" || retur
0120: 6e 20 31 0a 0a 09 09 65 63 68 6f 20 22 24 7b 6f n 1....echo "${o
0130: 5f 6f 75 74 70 75 74 7d 22 0a 0a 09 09 72 65 74 _output}"....ret
0140: 75 72 6e 20 30 0a 09 66 69 0a 0a 09 72 65 74 75 urn 0..fi...retu
0150: 72 6e 20 31 0a 7d 0a 0a 67 65 6e 5f 64 68 5f 70 rn 1.}..gen_dh_p
0160: 61 72 61 6d 73 5f 6f 70 65 6e 73 73 6c 28 29 20 arams_openssl()
0170: 7b 0a 09 6f 70 65 6e 73 73 6c 5f 64 68 70 61 72 {..openssl_dhpar
0180: 61 6d 20 22 24 7b 62 69 74 73 7d 22 20 3c 20 2f am "${bits}" < /
0190: 64 65 76 2f 6e 75 6c 6c 20 7c 7c 20 72 65 74 75 dev/null || retu
01a0: 72 6e 20 31 0a 09 72 65 74 75 72 6e 20 30 0a 7d rn 1..return 0.}
01b0: 0a 0a 67 65 6e 5f 64 68 5f 70 61 72 61 6d 73 5f ..gen_dh_params_
01c0: 72 65 6d 6f 74 65 28 29 20 7b 0a 09 75 72 6c 3d remote() {..url=
01d0: 22 68 74 74 70 73 3a 2f 2f 32 74 6f 6e 2e 63 6f "https://2ton.co
01e0: 6d 2e 61 75 2f 64 68 70 61 72 61 6d 2f 24 7b 62 m.au/dhparam/${b
01f0: 69 74 73 7d 22 0a 0a 09 72 5f 69 6e 70 75 74 3d its}"...r_input=
0200: 22 60 63 75 72 6c 20 2d 73 53 20 22 24 7b 75 72 "`curl -sS "${ur
0210: 6c 7d 22 60 22 20 7c 7c 20 5c 0a 09 09 72 5f 69 l}"`" || \...r_i
0220: 6e 70 75 74 3d 22 60 77 67 65 74 20 2d 4f 20 2d nput="`wget -O -
0230: 20 2d 6f 20 2f 64 65 76 2f 6e 75 6c 6c 20 22 24 -o /dev/null "$
0240: 7b 75 72 6c 7d 22 60 22 20 7c 7c 20 72 65 74 75 {url}"`" || retu
0250: 72 6e 20 31 0a 0a 09 69 66 20 72 5f 6f 75 74 70 rn 1...if r_outp
0260: 75 74 3d 22 60 65 63 68 6f 20 22 24 7b 72 5f 69 ut="`echo "${r_i
0270: 6e 70 75 74 7d 22 20 7c 20 6f 70 65 6e 73 73 6c nput}" | openssl
0280: 5f 64 68 70 61 72 61 6d 60 22 3b 20 74 68 65 6e _dhparam`"; then
0290: 0a 09 09 65 63 68 6f 20 22 24 7b 72 5f 6f 75 74 ...echo "${r_out
02a0: 70 75 74 7d 22 0a 0a 09 09 72 65 74 75 72 6e 20 put}"....return
02b0: 30 0a 09 66 69 0a 0a 09 72 65 74 75 72 6e 20 31 0..fi...return 1
02c0: 0a 7d 0a 0a 67 65 6e 5f 64 68 5f 70 61 72 61 6d .}..gen_dh_param
02d0: 73 5f 66 61 6c 6c 62 61 63 6b 28 29 20 7b 0a 09 s_fallback() {..
02e0: 63 61 74 20 3c 3c 20 5c 5f 45 4f 46 5f 0a 44 48 cat << \_EOF_.DH
02f0: 20 2a 67 65 74 5f 64 68 32 30 34 38 28 29 0a 09 *get_dh2048()..
0300: 7b 0a 09 73 74 61 74 69 63 20 75 6e 73 69 67 6e {..static unsign
0310: 65 64 20 63 68 61 72 20 64 68 32 30 34 38 5f 70 ed char dh2048_p
0320: 5b 5d 3d 7b 0a 09 09 30 78 43 31 2c 30 78 35 31 []={...0xC1,0x51
0330: 2c 30 78 35 38 2c 30 78 36 39 2c 30 78 46 42 2c ,0x58,0x69,0xFB,
0340: 30 78 45 38 2c 30 78 36 43 2c 30 78 34 37 2c 30 0xE8,0x6C,0x47,0
0350: 78 32 42 2c 30 78 38 36 2c 30 78 36 31 2c 30 78 x2B,0x86,0x61,0x
0360: 34 46 2c 0a 09 09 30 78 32 30 2c 30 78 32 45 2c 4F,...0x20,0x2E,
0370: 30 78 44 33 2c 30 78 46 43 2c 30 78 31 39 2c 30 0xD3,0xFC,0x19,0
0380: 78 45 45 2c 30 78 42 38 2c 30 78 46 33 2c 30 78 xEE,0xB8,0xF3,0x
0390: 33 35 2c 30 78 37 44 2c 30 78 42 41 2c 30 78 38 35,0x7D,0xBA,0x8
03a0: 36 2c 0a 09 09 30 78 32 41 2c 30 78 43 33 2c 30 6,...0x2A,0xC3,0
03b0: 78 43 38 2c 30 78 36 45 2c 30 78 46 34 2c 30 78 xC8,0x6E,0xF4,0x
03c0: 39 39 2c 30 78 37 35 2c 30 78 36 35 2c 30 78 44 99,0x75,0x65,0xD
03d0: 33 2c 30 78 37 41 2c 30 78 39 45 2c 30 78 44 46 3,0x7A,0x9E,0xDF
03e0: 2c 0a 09 09 30 78 44 34 2c 30 78 31 46 2c 30 78 ,...0xD4,0x1F,0x
03f0: 38 38 2c 30 78 45 33 2c 30 78 31 37 2c 30 78 46 88,0xE3,0x17,0xF
0400: 43 2c 30 78 41 31 2c 30 78 45 44 2c 30 78 41 32 C,0xA1,0xED,0xA2
0410: 2c 30 78 42 36 2c 30 78 37 37 2c 30 78 38 34 2c ,0xB6,0x77,0x84,
0420: 0a 09 09 30 78 41 41 2c 30 78 30 38 2c 30 78 46 ...0xAA,0x08,0xF
0430: 32 2c 30 78 39 37 2c 30 78 35 39 2c 30 78 37 41 2,0x97,0x59,0x7A
0440: 2c 30 78 41 30 2c 30 78 30 33 2c 30 78 30 44 2c ,0xA0,0x03,0x0D,
0450: 30 78 33 45 2c 30 78 37 45 2c 30 78 36 44 2c 0a 0x3E,0x7E,0x6D,.
0460: 09 09 30 78 36 35 2c 30 78 36 41 2c 30 78 41 34 ..0x65,0x6A,0xA4
0470: 2c 30 78 45 41 2c 30 78 35 34 2c 30 78 41 39 2c ,0xEA,0x54,0xA9,
0480: 30 78 35 32 2c 30 78 35 46 2c 30 78 36 33 2c 30 0x52,0x5F,0x63,0
0490: 78 42 34 2c 30 78 42 43 2c 30 78 39 38 2c 0a 09 xB4,0xBC,0x98,..
04a0: 09 30 78 34 45 2c 30 78 46 36 2c 30 78 45 31 2c .0x4E,0xF6,0xE1,
04b0: 30 78 41 34 2c 30 78 45 45 2c 30 78 31 36 2c 30 0xA4,0xEE,0x16,0
04c0: 78 30 41 2c 30 78 42 30 2c 30 78 30 31 2c 30 78 x0A,0xB0,0x01,0x
04d0: 42 44 2c 30 78 39 46 2c 30 78 41 31 2c 0a 09 09 BD,0x9F,0xA1,...
04e0: 30 78 45 38 2c 30 78 32 33 2c 30 78 32 39 2c 30 0xE8,0x23,0x29,0
04f0: 78 35 36 2c 30 78 34 30 2c 30 78 39 35 2c 30 78 x56,0x40,0x95,0x
0500: 31 33 2c 30 78 45 42 2c 30 78 43 42 2c 30 78 44 13,0xEB,0xCB,0xD
0510: 35 2c 30 78 46 43 2c 30 78 37 36 2c 0a 09 09 30 5,0xFC,0x76,...0
0520: 78 31 41 2c 30 78 34 31 2c 30 78 32 36 2c 30 78 x1A,0x41,0x26,0x
0530: 43 45 2c 30 78 32 30 2c 30 78 45 42 2c 30 78 33 CE,0x20,0xEB,0x3
0540: 30 2c 30 78 31 30 2c 30 78 31 37 2c 30 78 30 37 0,0x10,0x17,0x07
0550: 2c 30 78 45 31 2c 30 78 38 43 2c 0a 09 09 30 78 ,0xE1,0x8C,...0x
0560: 41 43 2c 30 78 35 37 2c 30 78 33 37 2c 30 78 38 AC,0x57,0x37,0x8
0570: 42 2c 30 78 45 38 2c 30 78 30 31 2c 30 78 44 45 B,0xE8,0x01,0xDE
0580: 2c 30 78 41 39 2c 30 78 45 46 2c 30 78 41 34 2c ,0xA9,0xEF,0xA4,
0590: 30 78 43 32 2c 30 78 41 34 2c 0a 09 09 30 78 36 0xC2,0xA4,...0x6
05a0: 45 2c 30 78 34 38 2c 30 78 32 35 2c 30 78 31 31 E,0x48,0x25,0x11
05b0: 2c 30 78 33 33 2c 30 78 31 31 2c 30 78 44 34 2c ,0x33,0x11,0xD4,
05c0: 30 78 35 32 2c 30 78 37 39 2c 30 78 38 37 2c 30 0x52,0x79,0x87,0
05d0: 78 39 46 2c 30 78 37 35 2c 0a 09 09 30 78 36 31 x9F,0x75,...0x61
05e0: 2c 30 78 46 37 2c 30 78 39 43 2c 30 78 37 44 2c ,0xF7,0x9C,0x7D,
05f0: 30 78 33 36 2c 30 78 34 31 2c 30 78 43 42 2c 30 0x36,0x41,0xCB,0
0600: 78 45 43 2c 30 78 38 46 2c 30 78 45 41 2c 30 78 xEC,0x8F,0xEA,0x
0610: 34 41 2c 30 78 34 37 2c 0a 09 09 30 78 36 41 2c 4A,0x47,...0x6A,
0620: 30 78 33 36 2c 30 78 33 37 2c 30 78 37 35 2c 30 0x36,0x37,0x75,0
0630: 78 42 39 2c 30 78 38 45 2c 30 78 46 35 2c 30 78 xB9,0x8E,0xF5,0x
0640: 35 46 2c 30 78 36 37 2c 30 78 43 46 2c 30 78 31 5F,0x67,0xCF,0x1
0650: 46 2c 30 78 44 38 2c 0a 09 09 30 78 43 41 2c 30 F,0xD8,...0xCA,0
0660: 78 37 30 2c 30 78 34 32 2c 30 78 43 37 2c 30 78 x70,0x42,0xC7,0x
0670: 41 32 2c 30 78 45 44 2c 30 78 30 46 2c 30 78 37 A2,0xED,0x0F,0x7
0680: 44 2c 30 78 42 45 2c 30 78 34 33 2c 30 78 30 38 D,0xBE,0x43,0x08
0690: 2c 30 78 32 38 2c 0a 09 09 30 78 36 36 2c 30 78 ,0x28,...0x66,0x
06a0: 33 44 2c 30 78 44 44 2c 30 78 38 37 2c 30 78 30 3D,0xDD,0x87,0x0
06b0: 44 2c 30 78 36 31 2c 30 78 36 45 2c 30 78 44 30 D,0x61,0x6E,0xD0
06c0: 2c 30 78 45 37 2c 30 78 34 39 2c 30 78 44 31 2c ,0xE7,0x49,0xD1,
06d0: 30 78 37 30 2c 0a 09 09 30 78 41 39 2c 30 78 34 0x70,...0xA9,0x4
06e0: 44 2c 30 78 44 35 2c 30 78 46 44 2c 30 78 45 44 D,0xD5,0xFD,0xED
06f0: 2c 30 78 46 32 2c 30 78 36 44 2c 30 78 33 32 2c ,0xF2,0x6D,0x32,
0700: 30 78 31 37 2c 30 78 39 37 2c 30 78 35 42 2c 30 0x17,0x97,0x5B,0
0710: 78 30 36 2c 0a 09 09 30 78 36 30 2c 30 78 39 43 x06,...0x60,0x9C
0720: 2c 30 78 35 46 2c 30 78 41 33 2c 30 78 35 44 2c ,0x5F,0xA3,0x5D,
0730: 30 78 33 34 2c 30 78 31 34 2c 30 78 37 45 2c 30 0x34,0x14,0x7E,0
0740: 78 36 33 2c 30 78 35 34 2c 30 78 45 34 2c 30 78 x63,0x54,0xE4,0x
0750: 37 45 2c 0a 09 09 30 78 30 39 2c 30 78 38 46 2c 7E,...0x09,0x8F,
0760: 30 78 42 42 2c 30 78 38 45 2c 30 78 41 30 2c 30 0xBB,0x8E,0xA0,0
0770: 78 44 30 2c 30 78 39 36 2c 30 78 41 43 2c 30 78 xD0,0x96,0xAC,0x
0780: 33 30 2c 30 78 32 30 2c 30 78 33 39 2c 30 78 33 30,0x20,0x39,0x3
0790: 42 2c 0a 09 09 30 78 38 43 2c 30 78 39 32 2c 30 B,...0x8C,0x92,0
07a0: 78 36 35 2c 30 78 33 37 2c 30 78 30 41 2c 30 78 x65,0x37,0x0A,0x
07b0: 38 46 2c 30 78 45 43 2c 30 78 37 32 2c 30 78 38 8F,0xEC,0x72,0x8
07c0: 42 2c 30 78 36 31 2c 30 78 37 44 2c 30 78 36 32 B,0x61,0x7D,0x62
07d0: 2c 0a 09 09 30 78 32 34 2c 30 78 35 34 2c 30 78 ,...0x24,0x54,0x
07e0: 45 39 2c 30 78 31 44 2c 30 78 30 31 2c 30 78 36 E9,0x1D,0x01,0x6
07f0: 38 2c 30 78 38 39 2c 30 78 43 34 2c 30 78 37 42 8,0x89,0xC4,0x7B
0800: 2c 30 78 33 43 2c 30 78 34 38 2c 30 78 36 32 2c ,0x3C,0x48,0x62,
0810: 0a 09 09 30 78 39 42 2c 30 78 38 33 2c 30 78 31 ...0x9B,0x83,0x1
0820: 31 2c 30 78 33 41 2c 30 78 30 42 2c 30 78 30 44 1,0x3A,0x0B,0x0D
0830: 2c 30 78 45 46 2c 30 78 35 41 2c 30 78 45 34 2c ,0xEF,0x5A,0xE4,
0840: 30 78 37 41 2c 30 78 41 30 2c 30 78 36 39 2c 0a 0x7A,0xA0,0x69,.
0850: 09 09 30 78 46 34 2c 30 78 35 34 2c 30 78 42 35 ..0xF4,0x54,0xB5
0860: 2c 30 78 35 42 2c 0a 09 09 7d 3b 0a 09 73 74 61 ,0x5B,...};..sta
0870: 74 69 63 20 75 6e 73 69 67 6e 65 64 20 63 68 61 tic unsigned cha
0880: 72 20 64 68 32 30 34 38 5f 67 5b 5d 3d 7b 0a 09 r dh2048_g[]={..
0890: 09 30 78 30 32 2c 0a 09 09 7d 3b 0a 09 44 48 20 .0x02,...};..DH
08a0: 2a 64 68 3b 0a 0a 09 69 66 20 28 28 64 68 3d 44 *dh;...if ((dh=D
08b0: 48 5f 6e 65 77 28 29 29 20 3d 3d 20 4e 55 4c 4c H_new()) == NULL
08c0: 29 20 72 65 74 75 72 6e 28 4e 55 4c 4c 29 3b 0a ) return(NULL);.
08d0: 09 64 68 2d 3e 70 3d 42 4e 5f 62 69 6e 32 62 6e .dh->p=BN_bin2bn
08e0: 28 64 68 32 30 34 38 5f 70 2c 73 69 7a 65 6f 66 (dh2048_p,sizeof
08f0: 28 64 68 32 30 34 38 5f 70 29 2c 4e 55 4c 4c 29 (dh2048_p),NULL)
0900: 3b 0a 09 64 68 2d 3e 67 3d 42 4e 5f 62 69 6e 32 ;..dh->g=BN_bin2
0910: 62 6e 28 64 68 32 30 34 38 5f 67 2c 73 69 7a 65 bn(dh2048_g,size
0920: 6f 66 28 64 68 32 30 34 38 5f 67 29 2c 4e 55 4c of(dh2048_g),NUL
0930: 4c 29 3b 0a 09 69 66 20 28 28 64 68 2d 3e 70 20 L);..if ((dh->p
0940: 3d 3d 20 4e 55 4c 4c 29 20 7c 7c 20 28 64 68 2d == NULL) || (dh-
0950: 3e 67 20 3d 3d 20 4e 55 4c 4c 29 29 0a 09 09 7b >g == NULL))...{
0960: 20 44 48 5f 66 72 65 65 28 64 68 29 3b 20 72 65 DH_free(dh); re
0970: 74 75 72 6e 28 4e 55 4c 4c 29 3b 20 7d 0a 09 72 turn(NULL); }..r
0980: 65 74 75 72 6e 28 64 68 29 3b 0a 09 7d 0a 5f 45 eturn(dh);..}._E
0990: 4f 46 5f 0a 7d 0a 0a 23 20 45 6e 61 62 6c 65 20 OF_.}..# Enable
09a0: 73 75 70 70 6f 72 74 20 66 6f 72 20 67 69 76 69 support for givi
09b0: 6e 67 20 74 68 65 20 73 61 6d 65 20 44 48 20 70 ng the same DH p
09c0: 61 72 61 6d 73 20 65 61 63 68 20 74 69 6d 65 0a arams each time.
09d0: 69 66 20 5b 20 22 24 31 22 20 3d 20 27 66 61 6c if [ "$1" = 'fal
09e0: 6c 62 61 63 6b 27 20 5d 3b 20 74 68 65 6e 0a 09 lback' ]; then..
09f0: 67 65 6e 5f 64 68 5f 70 61 72 61 6d 73 5f 66 61 gen_dh_params_fa
0a00: 6c 6c 62 61 63 6b 20 26 26 20 65 78 69 74 20 30 llback && exit 0
0a10: 0a 0a 09 65 78 69 74 20 31 0a 66 69 0a 0a 67 65 ...exit 1.fi..ge
0a20: 6e 5f 64 68 5f 70 61 72 61 6d 73 5f 6f 70 65 6e n_dh_params_open
0a30: 73 73 6c 20 26 26 20 65 78 69 74 20 30 0a 67 65 ssl && exit 0.ge
0a40: 6e 5f 64 68 5f 70 61 72 61 6d 73 5f 72 65 6d 6f n_dh_params_remo
0a50: 74 65 20 26 26 20 65 78 69 74 20 30 0a 67 65 6e te && exit 0.gen
0a60: 5f 64 68 5f 70 61 72 61 6d 73 5f 66 61 6c 6c 62 _dh_params_fallb
0a70: 61 63 6b 20 26 26 20 65 78 69 74 20 30 0a 0a 65 ack && exit 0..e
0a80: 78 69 74 20 31 0a xit 1.