SamNet-dev/paqctl
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: auto-install openssl for GFK certificate generation

Browse Source
This commit is contained in:
SamNet-dev
2026-02-06 12:51:23 -06:00
parent 95cd496f42
commit 4eb099030d
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
paqctl.sh
View File

@@ -264,6 +264,11 @@ check_dependencies() {
esac esac
fi fi
# openssl is required for GFK certificate generation
if ! command -v openssl &>/dev/null; then
install_package openssl || log_warn "Could not install openssl"
fi
# libpcap is required by paqet # libpcap is required by paqet
install_libpcap install_libpcap
} }
@@ -1497,6 +1502,10 @@ generate_gfk_certs() {
log_info "GFW-knocker certificates already exist" log_info "GFW-knocker certificates already exist"
return 0 return 0
fi fi
if ! command -v openssl &>/dev/null; then
log_info "Installing openssl..."
install_package openssl || { log_error "Failed to install openssl"; return 1; }
fi
log_info "Generating QUIC TLS certificates..." log_info "Generating QUIC TLS certificates..."
if ! openssl req -x509 -newkey rsa:2048 -keyout "$GFK_DIR/key.pem" \ if ! openssl req -x509 -newkey rsa:2048 -keyout "$GFK_DIR/key.pem" \
-out "$GFK_DIR/cert.pem" -days 3650 -nodes -subj "/CN=gfk" 2>/dev/null; then -out "$GFK_DIR/cert.pem" -days 3650 -nodes -subj "/CN=gfk" 2>/dev/null; then
@@ -2475,6 +2484,16 @@ download_gfk() {
generate_gfk_certs() { generate_gfk_certs() {
[ -f "$GFK_DIR/cert.pem" ] && [ -f "$GFK_DIR/key.pem" ] && return 0 [ -f "$GFK_DIR/cert.pem" ] && [ -f "$GFK_DIR/key.pem" ] && return 0
if ! command -v openssl &>/dev/null; then
log_info "Installing openssl..."
if command -v apt-get &>/dev/null; then apt-get install -y openssl 2>/dev/null
elif command -v dnf &>/dev/null; then dnf install -y openssl 2>/dev/null
elif command -v yum &>/dev/null; then yum install -y openssl 2>/dev/null
elif command -v apk &>/dev/null; then apk add openssl 2>/dev/null
elif command -v pacman &>/dev/null; then pacman -S --noconfirm openssl 2>/dev/null
fi
command -v openssl &>/dev/null || { log_error "Failed to install openssl"; return 1; }
fi
log_info "Generating QUIC certificates..." log_info "Generating QUIC certificates..."
openssl req -x509 -newkey rsa:2048 -keyout "$GFK_DIR/key.pem" \ openssl req -x509 -newkey rsa:2048 -keyout "$GFK_DIR/key.pem" \
-out "$GFK_DIR/cert.pem" -days 3650 -nodes -subj "/CN=gfk" 2>/dev/null || return 1 -out "$GFK_DIR/cert.pem" -days 3650 -nodes -subj "/CN=gfk" 2>/dev/null || return 1