/usr/sbin/
/usr/sbin
NameSizeModeActions
a2disconf162760755editdlrm
a2dismod162760755editdlrm
a2dissite162760755editdlrm
a2enconf162760755editdlrm
a2enmod162760755editdlrm
a2ensite162760755editdlrm
a2query98700755editdlrm
aa-remove-unknown30680755editdlrm
aa-status641200755editdlrm
aa-teardown1370755editdlrm
accessdb149040755editdlrm
add-shell10510755editdlrm
addgnupghome30750755editdlrm
addgroup382470755editdlrm
adduser382470755editdlrm
agetty568960755editdlrm
apache27587360755editdlrm
apache2ctl72290755editdlrm
apachectl72290755editdlrm
apparmor_parser15480640755editdlrm
apparmor_status641200755editdlrm
applygnupgdefaults22170755editdlrm
arp630880755editdlrm
arpd269600755editdlrm
arptables2242960755editdlrm
arptables-nft2242960755editdlrm
arptables-nft-restore2242960755editdlrm
arptables-nft-save2242960755editdlrm
arptables-restore2242960755editdlrm
arptables-save2242960755editdlrm
badblocks351440755editdlrm
bcache-super-show146480755editdlrm
biosdecode237600755editdlrm
blkdeactivate163510755editdlrm
blkdiscard229120755editdlrm
blkid516240755editdlrm
blkzone352000755editdlrm
blockdev311040755editdlrm
bridge947120755editdlrm
cache_check13896080755editdlrm
cache_dump13896080755editdlrm
cache_metadata_size13896080755editdlrm
cache_repair13896080755editdlrm
cache_restore13896080755editdlrm
cache_writeback13896080755editdlrm
capsh310320755editdlrm
cfdisk970080755editdlrm
cgdisk1540960755editdlrm
chcpu311040755editdlrm
check_forensic9520755editdlrm
chgpasswd595280755editdlrm
chmem352000755editdlrm
chpasswd554640755editdlrm
chroot394320755editdlrm
cpgr494480755editdlrm
cppw494480755editdlrm
cron517920755editdlrm
cryptdisks_start15440755editdlrm
cryptdisks_stop8440755editdlrm
cryptsetup1736160755editdlrm
cryptsetup-reencrypt925440755editdlrm
cryptsetup-ssh240960755editdlrm
ctrlaltdel147200755editdlrm
dbconfig-generate-include126560755editdlrm
dbconfig-load-include57040755editdlrm
dcb824480755editdlrm
debugfs2353200755editdlrm
delgroup164950755editdlrm
deluser164950755editdlrm
depmod1703520755editdlrm
devlink1462880755editdlrm
dhclient4532800755editdlrm
dhclient-script163040755editdlrm
dmeventd515920755editdlrm
dmidecode1259360755editdlrm
dmsetup1751280755editdlrm
dmstats1751280755editdlrm
dosfsck843600755editdlrm
dosfslabel393040755editdlrm
dpkg-preconfigure36630755editdlrm
dpkg-reconfigure44850755editdlrm
dumpe2fs310400755editdlrm
e2freefrag146480755editdlrm
e2fsck3602800755editdlrm
e2image433280755editdlrm
e2label1050160755editdlrm
e2mmpstatus310400755editdlrm
e2scrub72960755editdlrm
e2scrub_all53950755editdlrm
e2undo228400755editdlrm
e4crypt311040755editdlrm
e4defrag310320755editdlrm
ebtables2242960755editdlrm
ebtables-nft2242960755editdlrm
ebtables-nft-restore2242960755editdlrm
ebtables-nft-save2242960755editdlrm
ebtables-restore2242960755editdlrm
ebtables-save2242960755editdlrm
era_check13896080755editdlrm
era_dump13896080755editdlrm
era_invalidate13896080755editdlrm
era_restore13896080755editdlrm
escapesrc229920755editdlrm
ethtool5647120755editdlrm
faillock144880755editdlrm
fatlabel393040755editdlrm
fdisk1130720755editdlrm
filefrag187600755editdlrm
findfs147200755editdlrm
fixparts598800755editdlrm
fsadm245190755editdlrm
fsck434400755editdlrm
fsck.btrfs11850755editdlrm
fsck.cramfs311680755editdlrm
fsck.ext23602800755editdlrm
fsck.ext33602800755editdlrm
fsck.ext43602800755editdlrm
fsck.fat843600755editdlrm
fsck.minix557120755editdlrm
fsck.msdos843600755editdlrm
fsck.vfat843600755editdlrm
fsck.xfs19400755editdlrm
fsfreeze147200755editdlrm
fstab-decode187440755editdlrm
fstrim433920755editdlrm
gdisk1786720755editdlrm
genccode150880755editdlrm
gencmn150880755editdlrm
genl926080755editdlrm
gennorm2644080755editdlrm
gensprep274480755editdlrm
getcap146480755editdlrm
getpcaps146480755editdlrm
getty568960755editdlrm
groupadd685200755editdlrm
groupdel642320755editdlrm
groupmems554880755editdlrm
groupmod684240755editdlrm
grpck595280755editdlrm
grpconv512080755editdlrm
grpunconv512080755editdlrm
grub-bios-setup9640160755editdlrm
grub-install12041280755editdlrm
grub-macbless9514080755editdlrm
grub-mkconfig88050755editdlrm
grub-mkdevicemap2208800755editdlrm
grub-probe9639520755editdlrm
grub-reboot48410755editdlrm
grub-set-default35560755editdlrm
halt11198560755editdlrm
hdparm1427760755editdlrm
httxt2dbm146480755editdlrm
hwclock517120755editdlrm
iconvconfig311280755editdlrm
icupkg236560755editdlrm
ifconfig790240755editdlrm
init18499920755editdlrm
insmod1703520755editdlrm
installkernel26590755editdlrm
integritysetup553680755editdlrm
invoke-rc.d165070755editdlrm
ip7188960755editdlrm
ip6tables2242960755editdlrm
ip6tables-apply70570755editdlrm
ip6tables-legacy992720755editdlrm
ip6tables-legacy-restore992720755editdlrm
ip6tables-legacy-save992720755editdlrm
ip6tables-nft2242960755editdlrm
ip6tables-nft-restore2242960755editdlrm
ip6tables-nft-save2242960755editdlrm
ip6tables-restore2242960755editdlrm
ip6tables-restore-translate2242960755editdlrm
ip6tables-save2242960755editdlrm
ip6tables-translate2242960755editdlrm
ipmaddr187440755editdlrm
iptables2242960755editdlrm
iptables-apply70570755editdlrm
iptables-legacy992720755editdlrm
iptables-legacy-restore992720755editdlrm
iptables-legacy-save992720755editdlrm
iptables-nft2242960755editdlrm
iptables-nft-restore2242960755editdlrm
iptables-nft-save2242960755editdlrm
iptables-restore2242960755editdlrm
iptables-restore-translate2242960755editdlrm
iptables-save2242960755editdlrm
iptables-translate2242960755editdlrm
iptunnel187440755editdlrm
irqbalance684640755editdlrm
irqbalance-ui352080755editdlrm
iscsi-iname146480755editdlrm
iscsiadm4080240755editdlrm
iscsid3057200755editdlrm
iscsistart2852480755editdlrm
iscsi_discovery52930755editdlrm
isosize147200755editdlrm
iucode-tool597360755editdlrm
iucode_tool597360755editdlrm
kbdrate186000755editdlrm
killall5311120755editdlrm
kpartx472720755editdlrm
ldattach270080755editdlrm
ldconfig3870755editdlrm
ldconfig.real12139600755editdlrm
locale-gen43980755editdlrm
logrotate1046960755editdlrm
logsave144960755editdlrm
losetup722080755editdlrm
lsmod1703520755editdlrm
luksformat34010755editdlrm
lvchange30275440755editdlrm
lvconvert30275440755editdlrm
lvcreate30275440755editdlrm
lvdisplay30275440755editdlrm
lvextend30275440755editdlrm
lvm30275440755editdlrm
lvmconfig30275440755editdlrm
lvmdiskscan30275440755editdlrm
lvmdump103120755editdlrm
lvmpolld2418640755editdlrm
lvmsadc30275440755editdlrm
lvmsar30275440755editdlrm
lvreduce30275440755editdlrm
lvremove30275440755editdlrm
lvrename30275440755editdlrm
lvresize30275440755editdlrm
lvs30275440755editdlrm
lvscan30275440755editdlrm
make-bcache229120755editdlrm
make-ssl-cert68120755editdlrm
mdadm6157440755editdlrm
mdmon2646400755editdlrm
mii-tool273760755editdlrm
mkdosfs520480755editdlrm
mke2fs1337520755editdlrm
mkfs147200755editdlrm
mkfs.bfs229120755editdlrm
mkfs.btrfs4825600755editdlrm
mkfs.cramfs351440755editdlrm
mkfs.ext21337520755editdlrm
mkfs.ext31337520755editdlrm
mkfs.ext41337520755editdlrm
mkfs.fat520480755editdlrm
mkfs.minix434080755editdlrm
mkfs.msdos520480755editdlrm
mkfs.ntfs720720755editdlrm
mkfs.vfat520480755editdlrm
mkfs.xfs3919600755editdlrm
mkhomedir_helper227040755editdlrm
mkinitramfs124530755editdlrm
mklost+found146480755editdlrm
mkntfs720720755editdlrm
mkswap474960755editdlrm
ModemManager21942400755editdlrm
modinfo1703520755editdlrm
modprobe1703520755editdlrm
mount.fuse187360755editdlrm
mount.fuse3187360755editdlrm
mount.lowntfs-3g1177360755editdlrm
mount.ntfs1628240755editdlrm
mount.ntfs-3g1628240755editdlrm
mpathpersist318000755editdlrm
multipath349680755editdlrm
multipathd1374800755editdlrm
mysqld556047280755editdlrm
nameif148240755editdlrm
needrestart396580755editdlrm
netplan7980755editdlrm
netwatch3376640755editdlrm
newusers765200755editdlrm
nfnl_osf187360755editdlrm
nft268560755editdlrm
nginx12405520755editdlrm
nologin146400755editdlrm
ntfsclone515920755editdlrm
ntfscp352000755editdlrm
ntfslabel229120755editdlrm
ntfsresize638880755editdlrm
ntfsundelete515920755editdlrm
on_ac_power37880755editdlrm
overlayroot-chroot25100755editdlrm
ownership147920755editdlrm
pam-auth-update209920755editdlrm
pam_extrausers_chkpwd226802755editdlrm
pam_extrausers_update308720755editdlrm
pam_getenv28900755editdlrm
pam_timestamp_check144880755editdlrm
paperconfig41700755editdlrm
parted884720755editdlrm
partprobe147200755editdlrm
pdata_tools13896080755editdlrm
php-fpm8.155534480755editdlrm
php-fpm8.357803040755editdlrm
php-fpm8.5102804400755editdlrm
phpdismod72780755editdlrm
phpenmod72780755editdlrm
phpquery63890755editdlrm
pivot_root147200755editdlrm
plipconfig146480755editdlrm
plymouthd1541680755editdlrm
postalias228320755editdlrm
postcat229040755editdlrm
postconf1882080755editdlrm
postdrop229602555editdlrm
postfix188160755editdlrm
postfix-add-filter49540755editdlrm
postfix-add-policy38600755editdlrm
postfix-collate29420755editdlrm
postkick146400755editdlrm
postlock146400755editdlrm
postlog148000755editdlrm
postmap228320755editdlrm
postmulti314240755editdlrm
postqueue229122555editdlrm
postsuper313280755editdlrm
posttls-finger434000755editdlrm
poweroff11198560755editdlrm
pvchange30275440755editdlrm
pvck30275440755editdlrm
pvcreate30275440755editdlrm
pvdisplay30275440755editdlrm
pvmove30275440755editdlrm
pvremove30275440755editdlrm
pvresize30275440755editdlrm
pvs30275440755editdlrm
pvscan30275440755editdlrm
pwck513360755editdlrm
pwconv471120755editdlrm
pwunconv430160755editdlrm
qmqp-sink187360755editdlrm
qmqp-source228480755editdlrm
qshape128490755editdlrm
rarp331040755editdlrm
readprofile229440755editdlrm
reboot11198560755editdlrm
remove-shell10990755editdlrm
resize2fs678960755editdlrm
rmail187360755editdlrm
rmmod1703520755editdlrm
rmt599760755editdlrm
rmt-tar599760755editdlrm
route658080755editdlrm
rsyslogd7856000755editdlrm
rtacct289920755editdlrm
rtcwake352000755editdlrm
rtmon925600755editdlrm
runlevel11198560755editdlrm
runuser556800755editdlrm
sendmail311840755editdlrm
service90970755editdlrm
setcap146480755editdlrm
setvesablank145680755editdlrm
setvtrgb146320755editdlrm
sfdisk1048320755editdlrm
sgdisk1663840755editdlrm
shadowconfig8850755editdlrm
shutdown11198560755editdlrm
slattach369440755editdlrm
smtp-sink361120755editdlrm
smtp-source310480755editdlrm
split-logfile24150755editdlrm
sshd9212880755editdlrm
start-stop-daemon484880755editdlrm
statnetd350320755editdlrm
sudo_logsrvd2049040755editdlrm
sudo_sendlog1099120755editdlrm
sulogin433920755editdlrm
swaplabel188160755editdlrm
swapoff229120755editdlrm
swapon433920755editdlrm
switch_root229120755editdlrm
sysctl309600755editdlrm
tarcat9360755editdlrm
tc6288160755editdlrm
tcpblast354560755editdlrm
telinit11198560755editdlrm
thermald5679120755editdlrm
thin_check13896080755editdlrm
thin_delta13896080755editdlrm
thin_dump13896080755editdlrm
thin_ls13896080755editdlrm
thin_metadata_size13896080755editdlrm
thin_repair13896080755editdlrm
thin_restore13896080755editdlrm
thin_rmap13896080755editdlrm
thin_trim13896080755editdlrm
tipc926080755editdlrm
trafshow1305920755editdlrm
tune2fs1050160755editdlrm
tzconfig1060755editdlrm
udpblast354560755editdlrm
ufw49380755editdlrm
umount.udisks2146400755editdlrm
unix_chkpwd267762755editdlrm
unix_update308720755editdlrm
update-ca-certificates54180755editdlrm
update-grub640755editdlrm
update-grub-gfxpayload3010755editdlrm
update-grub2640755editdlrm
update-gsfontmap4700755editdlrm
update-info-dir17000755editdlrm
update-initramfs69060755editdlrm
update-locale30630755editdlrm
update-mime96130755editdlrm
update-passwd353920755editdlrm
update-pciids17530755editdlrm
update-rc.d173240755editdlrm
update-secureboot-policy76050755editdlrm
update-shells38060755editdlrm
upgrade-from-grub-legacy15960755editdlrm
usbmuxd886800755editdlrm
usb_modeswitch610960755editdlrm
usb_modeswitch_dispatcher274180755editdlrm
useradd1307200755editdlrm
userdel889360755editdlrm
usermod1264240755editdlrm
uuidd315920755editdlrm
validlocale17730755editdlrm
vcstime144880755editdlrm
vdpa312960755editdlrm
veritysetup448080755editdlrm
vgcfgbackup30275440755editdlrm
vgcfgrestore30275440755editdlrm
vgchange30275440755editdlrm
vgck30275440755editdlrm
vgconvert30275440755editdlrm
vgcreate30275440755editdlrm
vgdisplay30275440755editdlrm
vgexport30275440755editdlrm
vgextend30275440755editdlrm
vgimport30275440755editdlrm
vgimportclone30275440755editdlrm
vgmerge30275440755editdlrm
vgmknodes30275440755editdlrm
vgreduce30275440755editdlrm
vgremove30275440755editdlrm
vgrename30275440755editdlrm
vgs30275440755editdlrm
vgscan30275440755editdlrm
vgsplit30275440755editdlrm
vigr578880755editdlrm
vipw578880755editdlrm
visudo2250640755editdlrm
vpddecode149280755editdlrm
wipefs392960755editdlrm
xfs_admin14070755editdlrm
xfs_bmap6950755editdlrm
xfs_copy844640755editdlrm
xfs_db6680960755editdlrm
xfs_estimate145040755editdlrm
xfs_freeze8000755editdlrm
xfs_fsr431920755editdlrm
xfs_growfs392000755editdlrm
xfs_info12940755editdlrm
xfs_io2043440755editdlrm
xfs_logprint802080755editdlrm
xfs_mdrestore268000755editdlrm
xfs_metadump7820755editdlrm
xfs_mkfile10400755editdlrm
xfs_ncheck6850755editdlrm
xfs_quota923280755editdlrm
xfs_repair6137680755editdlrm
xfs_rtcp185840755editdlrm
xfs_scrub1088160755editdlrm
xfs_scrub_all60060755editdlrm
xfs_spaceman433200755editdlrm
xtables-legacy-multi992720755editdlrm
xtables-monitor2242960755editdlrm
xtables-nft-multi2242960755editdlrm
zerofree144880755editdlrm
zic638160755editdlrm
zramctl558240755editdlrm
Edit: /usr/sbin/make-ssl-cert (6812B)
#!/bin/bash -e # This is a mockup of a script to produce a snakeoil cert # The aim is to have a debconfisable ssl-certificate script # shellcheck source=/dev/null disable=SC1091 . /usr/share/debconf/confmodule db_version 2.0 db_capb backup progname=$(basename "${0}") usage() { cat < ${progname} [options] generate-default-snakeoil Options: -h,--help This usage text -f,--force-overwrite Overwrite existing .pem and .key files -n,--no-overwrite Never overwrite existing snakeoil .pem and .key files, even if algorithms are out of date -x,--expiration-days Override default expiration time EOF exit "${1}"; } ask_via_debconf() { RET="" if db_settitle make-ssl-cert/title ; then : # OK else echo "Debconf failed with error code $? $RET" >&2 echo "Maybe your debconf database is corrupt." >&2 echo "Try re-installing ssl-cert." >&2 fi RET="" while [ "x$RET" = "x" ]; do db_fset make-ssl-cert/hostname seen false db_input high make-ssl-cert/hostname || true db_go db_get make-ssl-cert/hostname done db_get make-ssl-cert/hostname HostName="$RET" db_fset make-ssl-cert/hostname seen false db_fset make-ssl-cert/altname seen false db_input high make-ssl-cert/altname || true db_go db_get make-ssl-cert/altname AddAltName="$RET" db_fset make-ssl-cert/altname seen false SubjectAltName="DNS:$HostName" [ -z "$AddAltName" ] || SubjectAltName="$SubjectAltName,$AddAltName" } make_snakeoil() { if ! HostName="$(hostname -f)" ; then HostName="$(hostname)" echo "make-ssl-cert: Could not get FQDN, using '$HostName'". echo "make-ssl-cert: You may want to fix your /etc/hosts and/or DNS setup and run" echo "make-ssl-cert: 'make-ssl-cert generate-default-snakeoil --force-overwrite'" echo "make-ssl-cert: again." fi SubjectAltName="DNS:$HostName" if [ ${#HostName} -gt 64 ] ; then # The certificate's common name cannot be longer than 64 chars. # Use the short name instead. HostName="$(hostname)" fi } create_temporary_cnf() { sed -e s#@HostName@#"$HostName"# -e s#@SubjectAltName@#"$SubjectAltName"# "${template}" > "${TMPFILE}" } create_hash_link() { local file="$1" local cryptfile filename i filename=$(basename "$file") cryptfile=$(dirname "$file")/$(openssl x509 -hash -noout -in "$file") i=0 while [ -L "${cryptfile}.$i" ] ; do if [ "$(readlink "${cryptfile}.$i")" = "$filename" ] ; then return 0 fi i=$(( i + 1 )) done ln -sf "$filename" "${cryptfile}.$i" } check_min_algo() { local file="$1" local bits if ! openssl x509 -text -in "$file" | grep -q 'Signature Algorithm:.*sha256' ; then echo "Signature algorithm of $file is not sha256. Recreating." >&2 return 1 fi bits=$(openssl x509 -text -in "$file" |grep -o "Public-Key: \\(.*\\)") # value: "Public-Key: (2048 bit)" bits="${bits##*\(}" bits="${bits% bit\)}" case "$bits" in [0-9][0-9][0-9][0-9]) ;; *) echo "WARNING: Cannot determine RSA key length" >&2 return 0 ;; esac if [ "$bits" -lt 2048 ] ; then echo "RSA key length of $file is $bits. Recreating with 2048 bits" >&2 return 1 fi return 0 } # Process arguments subcommand= template= opt_force_overwrite="false" opt_no_overwrite="false" opt_expiration_days="3650" # Transform long options to short ones newargs=() for arg in "${@}"; do case "${arg}" in --help) newargs+=(-h) ;; --force-overwrite) # Move to front so that we accept --force-overwrite at the end, for # compatibility with 1.0.x. newargs=("-f" "${newargs[@]}") ;; --no-overwrite) newargs+=(-n) ;; --expiration-days) newargs+=(-x) ;; --*) printf "Unrecognized option %s\n\n" "${arg}" usage 1 ;; *) newargs+=("$arg") ;; esac done set -- "${newargs[@]}" # Parse short options while getopts "hfnx:" opt "${@}"; do case "${opt}" in h) usage 0 ;; f) opt_force_overwrite="true" ;; n) opt_no_overwrite="true" ;; x) opt_expiration_days="${OPTIND}" ;; *) printf "Unrecognized option %s\n\n" "-${opt}" usage 1 ;; esac done shift "$((OPTIND - 1))" if $opt_force_overwrite && $opt_no_overwrite ; then usage 1 fi # Parse subcommand if [ "${1}" = "generate-default-snakeoil" ]; then subcommand="${1}" else subcommand="manual" template="${1}" fi # Takes two arguments, the base layout and the output cert. if [ "${subcommand}" = "manual" ]; then output="${2}" [ -n "${template}" ] || usage 1 [ -n "${output}" ] || usage 1 # be anal in manual mode. if [ ! -f "${template}" ]; then printf "Could not open template file: %s!\n" "${template}"; exit 1; fi if [ -f "${output}" ] && [ "${opt_force_overwrite}" != "true" ]; then printf "%s file already exists!\n" "${output}"; exit 1; fi ask_via_debconf elif [ "${subcommand}" = "generate-default-snakeoil" ]; then template="/usr/share/ssl-cert/ssleay.cnf" if [ -f "/etc/ssl/certs/ssl-cert-snakeoil.pem" ] && [ -f "/etc/ssl/private/ssl-cert-snakeoil.key" ]; then if "${opt_no_overwrite}" ; then exit 0 fi if ! "${opt_force_overwrite}" ; then if check_min_algo "/etc/ssl/certs/ssl-cert-snakeoil.pem" ; then exit 0 fi fi fi make_snakeoil else usage 1 fi # # should be a less common char # problem is that openssl virtually accepts everything and we need to # sacrifice one char. TMPFILE="$(mktemp)" || exit 1 TMPOUT="$(mktemp)" || exit 1 trap 'rm -f ${TMPFILE} ${TMPOUT}' EXIT create_temporary_cnf # create the certificate. umask 077 if [ "${subcommand}" = "manual" ]; then if ! openssl req -config "${TMPFILE}" -new -x509 -days "${opt_expiration_days}" -nodes -sha256 \ -out "${output}" -keyout "${output}" > "${TMPOUT}" 2>&1 then echo "Could not create certificate. Openssl output was:" >&2 cat "${TMPOUT}" >&2 exit 1 fi chmod 600 "${output}" create_hash_link "${output}" elif [ "${subcommand}" = "generate-default-snakeoil" ]; then if ! openssl req -config "${TMPFILE}" -new -x509 -days "${opt_expiration_days}" -nodes -sha256 \ -out /etc/ssl/certs/ssl-cert-snakeoil.pem \ -keyout /etc/ssl/private/ssl-cert-snakeoil.key > "${TMPOUT}" 2>&1 then echo "Could not create certificate. Openssl output was:" >&2 cat "${TMPOUT}" >&2 exit 1 fi chmod 644 /etc/ssl/certs/ssl-cert-snakeoil.pem chmod 640 /etc/ssl/private/ssl-cert-snakeoil.key chown root:ssl-cert /etc/ssl/private/ssl-cert-snakeoil.key create_hash_link /etc/ssl/certs/ssl-cert-snakeoil.pem else usage 1 fi