From e583069b5700307528ee77c3c96f953da01c657f Mon Sep 17 00:00:00 2001
From: riijj <rijjjj@163.com>
Date: Wed, 26 Jun 2019 03:02:09 +0000
Subject: [PATCH] Auto create server.pem & server.cert.pem

If the import certificate is selected and the user only copies ca.pem & ca.cert.pem, Both server.pem and server.cert.pem are automatically created when there is no valid server certificate and private key file.
---
 one-key-ikev2.sh | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/one-key-ikev2.sh b/one-key-ikev2.sh
index 26baa8f2..16ae99dd 100644
--- a/one-key-ikev2.sh
+++ b/one-key-ikev2.sh
@@ -300,8 +300,16 @@ function import_cert(){
         echo -e "server.cert.pem [$(__green "found")]"
         echo -e "client.cert.pem [$(__green "auto create")]"
     else
-        echo -e "server.cert.pem [$(__red "Not found!")]"
-        exit
+        echo -e "server.cert.pem [$(__red "Not found!,auto creating...")]"
+        ipsec pki --gen --outform pem > server.pem
+        ipsec pki --pub --in server.pem | ipsec pki --issue --cacert ca.cert.pem \
+        --cakey ca.pem --dn "C=${my_cert_c}, O=${my_cert_o}, CN=${vps_ip}" \
+        --san="${vps_ip}" --flag serverAuth --flag ikeIntermediate \
+        --outform pem > server.cert.pem
+        cp -f server.cert.pem my_key/server.cert.pem
+        cp -f server.cert.pem my_key/client.cert.pem
+        echo -e "server.cert.pem [$(__green "created")]"
+        echo -e "client.cert.pem [$(__green "auto create")]"
     fi
     if [ -f server.pem ];then
         cp -f server.pem my_key/server.pem