#!/bin/sh

mkdir -p /etc/ssl/certs
mkdir -p /etc/ssl/private
chmod 0710 /etc/ssl/private

# Generate a fresh self-signed cert every time
apt-get install -y openssl
openssl req -x509 -newkey rsa:4096 -sha256 -days 3650 -nodes \
  -keyout /etc/ssl/private/ssl-cert-snakeoil.key \
  -out /etc/ssl/certs/ssl-cert-snakeoil.pem \
  -subj "/C=ES/ST=Exam"