all : cert
cert-req: req.pem
cert cert-req: control/clientcert.pem
	@:

control/clientcert.pem: control/servercert.pem
	cd control; ln -s servercert.pem clientcert.pem

control/servercert.pem:
	PATH=$$PATH:/usr/local/ssl/bin \
		openssl req -new -x509 -nodes -days 366 -out $@ -keyout $@
	chmod 640 $@
	chown qmaild.qmail $@

req.pem:
	PATH=$$PATH:/usr/local/ssl/bin openssl req \
		-new -nodes -out $@ -keyout control/servercert.pem
	chmod 640 control/servercert.pem
	chown qmaild.qmail control/servercert.pem
	@echo
	@echo "Send req.pem to your CA to obtain signed_req.pem, and do:"
	@echo "cat signed_req.pem >> control/servercert.pem"
