#!/bin/bash
# This program is a handler written for Apache mod_ssl's SSLPassPhraseDialog.
#
# If you'd like to write your custom binary providing passwords to mod_ssl,
# see the documentation of the aforementioned directive of the mod_ssl module.

USAGE="./ipa-pwdreader host:port RSA|DSA|ECC|number"
ERR_UNKNOWN_KEY="\
ERROR: You seem to be running a non-standard IPA installation.
Please extend the /var/libexec/ipa/ipa-pwdreader script to cover your case."

if [ ! "$#" -eq 2 ]; then
    echo "Wrong number of arguments!" 1>&2
    echo "$USAGE" 1>&2
    exit 1
fi


case "$1" in
    "${HOSTNAME}:443" )
        # Read IPA password
        # IPA expects the password filename format to be
        # <hostname>-<port>-<ecryption_algorithm>
        IPA_PASSWD_PATH="/var/lib/ipa/passwds/${1/:/-}-$2"
        cat $IPA_PASSWD_PATH
        ;;
# ================
# Extend for more virtual hosts with
#    <vhostname>:<vhost_port> )
#        your_code
#        ;;
# ================
    *)
        echo "$ERR_UNKNOWN_KEY" 1>&2
        exit 1
esac