#!/bin/sh -e

KEY=/etc/exim4/exim.key
CERT=/etc/exim4/exim.crt

CERTDIR=/etc/ssl/certs
PEM=$CERTDIR/stunnel.pem

cat $KEY $CERT > $PEM
chmod 0600 $PEM

RAND=`tempfile -m600 -pstu`
dd if=/dev/urandom of=$RAND count=2
openssl dhparam -rand $RAND 512 >> $PEM
rm -f $RAND

ln -sf $PEM $CERTDIR/`openssl x509 -noout -hash < $PEM`.0