| 
				
			 | 
			
			
				@@ -189,6 +189,9 @@ WIKI_SQLITE_ADDON_HASH="930335e647c7e62f3068689c256ee169fad2426b64f8360685d391ec 
			 | 
		
	
		
			
			| 
				189
			 | 
			
				189
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				190
			 | 
			
				190
			 | 
			
			
				 GPG_KEYSERVER="hkp://keys.gnupg.net" 
			 | 
		
	
		
			
			| 
				191
			 | 
			
				191
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				
			 | 
			
				192
			 | 
			
			
				+# gets set to yes if gpg keys are imported from usb 
			 | 
		
	
		
			
			| 
				
			 | 
			
				193
			 | 
			
			
				+GPG_KEYS_IMPORTED="no" 
			 | 
		
	
		
			
			| 
				
			 | 
			
				194
			 | 
			
			
				+ 
			 | 
		
	
		
			
			| 
				192
			 | 
			
				195
			 | 
			
			
				 # optionally you can provide your exported GPG key pair here 
			 | 
		
	
		
			
			| 
				193
			 | 
			
				196
			 | 
			
			
				 # Note that the private key file will be deleted after use 
			 | 
		
	
		
			
			| 
				194
			 | 
			
				197
			 | 
			
			
				 # If these are unspecified then a new GPG key will be created 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -384,6 +387,7 @@ function search_for_attached_usb_drive { 
			 | 
		
	
		
			
			| 
				384
			 | 
			
				387
			 | 
			
			
				               echo 'Importing GPG keyring' 
			 | 
		
	
		
			
			| 
				385
			 | 
			
				388
			 | 
			
			
				               cp -r $USB_MOUNT/.gnupg /home/$MY_USERNAME 
			 | 
		
	
		
			
			| 
				386
			 | 
			
				389
			 | 
			
			
				               chown -R $MY_USERNAME:$MY_USERNAME /home/$MY_USERNAME/.gnupg 
			 | 
		
	
		
			
			| 
				
			 | 
			
				390
			 | 
			
			
				+              GPG_KEYS_IMPORTED="yes" 
			 | 
		
	
		
			
			| 
				387
			 | 
			
				391
			 | 
			
			
				               if [ -f /home/$MY_USERNAME/.gnupg/secring.gpg ]; then 
			 | 
		
	
		
			
			| 
				388
			 | 
			
				392
			 | 
			
			
				                   shred -zu $USB_MOUNT/.gnupg/secring.gpg 
			 | 
		
	
		
			
			| 
				389
			 | 
			
				393
			 | 
			
			
				                   shred -zu $USB_MOUNT/.gnupg/random_seed 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -434,18 +438,18 @@ function search_for_attached_usb_drive { 
			 | 
		
	
		
			
			| 
				434
			 | 
			
				438
			 | 
			
			
				           cp -r $USB_MOUNT/ssl/* /etc/ssl 
			 | 
		
	
		
			
			| 
				435
			 | 
			
				439
			 | 
			
			
				           chmod 640 /etc/ssl/certs/* 
			 | 
		
	
		
			
			| 
				436
			 | 
			
				440
			 | 
			
			
				           chmod 400 /etc/ssl/private/* 
			 | 
		
	
		
			
			| 
				437
			 | 
			
				
			 | 
			
			
				-		  # change ownership of some certificates 
			 | 
		
	
		
			
			| 
				438
			 | 
			
				
			 | 
			
			
				-		  if [ -f /etc/ssl/private/xmpp.key ]; then 
			 | 
		
	
		
			
			| 
				439
			 | 
			
				
			 | 
			
			
				-			  chown prosody:prosody /etc/ssl/private/xmpp.* 
			 | 
		
	
		
			
			| 
				440
			 | 
			
				
			 | 
			
			
				-			  chown prosody:prosody /etc/ssl/certs/xmpp.* 
			 | 
		
	
		
			
			| 
				441
			 | 
			
				
			 | 
			
			
				-		  fi 
			 | 
		
	
		
			
			| 
				442
			 | 
			
				
			 | 
			
			
				-		  if [ -f /etc/ssl/private/dovecot.key ]; then 
			 | 
		
	
		
			
			| 
				443
			 | 
			
				
			 | 
			
			
				-			  chown root:dovecot /etc/ssl/certs/dovecot.* 
			 | 
		
	
		
			
			| 
				444
			 | 
			
				
			 | 
			
			
				-			  chown root:dovecot /etc/ssl/private/dovecot.* 
			 | 
		
	
		
			
			| 
				445
			 | 
			
				
			 | 
			
			
				-		  fi 
			 | 
		
	
		
			
			| 
				446
			 | 
			
				
			 | 
			
			
				-		  if [ -f /etc/ssl/private/exim.key ]; then 
			 | 
		
	
		
			
			| 
				447
			 | 
			
				
			 | 
			
			
				-			  chown root:Debian-exim /etc/ssl/private/exim.key /etc/ssl/certs/exim.crt /etc/ssl/certs/exim.dhparam 
			 | 
		
	
		
			
			| 
				448
			 | 
			
				
			 | 
			
			
				-		  fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				441
			 | 
			
			
				+          # change ownership of some certificates 
			 | 
		
	
		
			
			| 
				
			 | 
			
				442
			 | 
			
			
				+          if [ -f /etc/ssl/private/xmpp.key ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				443
			 | 
			
			
				+              chown prosody:prosody /etc/ssl/private/xmpp.* 
			 | 
		
	
		
			
			| 
				
			 | 
			
				444
			 | 
			
			
				+              chown prosody:prosody /etc/ssl/certs/xmpp.* 
			 | 
		
	
		
			
			| 
				
			 | 
			
				445
			 | 
			
			
				+          fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				446
			 | 
			
			
				+          if [ -f /etc/ssl/private/dovecot.key ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				447
			 | 
			
			
				+              chown root:dovecot /etc/ssl/certs/dovecot.* 
			 | 
		
	
		
			
			| 
				
			 | 
			
				448
			 | 
			
			
				+              chown root:dovecot /etc/ssl/private/dovecot.* 
			 | 
		
	
		
			
			| 
				
			 | 
			
				449
			 | 
			
			
				+          fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				450
			 | 
			
			
				+          if [ -f /etc/ssl/private/exim.key ]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				451
			 | 
			
			
				+              chown root:Debian-exim /etc/ssl/private/exim.key /etc/ssl/certs/exim.crt /etc/ssl/certs/exim.dhparam 
			 | 
		
	
		
			
			| 
				
			 | 
			
				452
			 | 
			
			
				+          fi 
			 | 
		
	
		
			
			| 
				449
			 | 
			
				453
			 | 
			
			
				       fi 
			 | 
		
	
		
			
			| 
				450
			 | 
			
				454
			 | 
			
			
				       if [ -d $USB_MOUNT/personal ]; then 
			 | 
		
	
		
			
			| 
				451
			 | 
			
				455
			 | 
			
			
				           echo 'Importing personal directory' 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -1081,7 +1085,7 @@ function configure_email { 
			 | 
		
	
		
			
			| 
				1081
			 | 
			
				1085
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				1082
			 | 
			
				1086
			 | 
			
			
				   # make a tls certificate for email 
			 | 
		
	
		
			
			| 
				1083
			 | 
			
				1087
			 | 
			
			
				   if [ ! -f /etc/ssl/private/exim.key ]; then 
			 | 
		
	
		
			
			| 
				1084
			 | 
			
				
			 | 
			
			
				-	  makecert exim 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1088
			 | 
			
			
				+      makecert exim 
			 | 
		
	
		
			
			| 
				1085
			 | 
			
				1089
			 | 
			
			
				   fi 
			 | 
		
	
		
			
			| 
				1086
			 | 
			
				1090
			 | 
			
			
				   cp /etc/ssl/private/exim.key /etc/exim4 
			 | 
		
	
		
			
			| 
				1087
			 | 
			
				1091
			 | 
			
			
				   cp /etc/ssl/certs/exim.crt /etc/exim4 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -1250,7 +1254,7 @@ function configure_imap { 
			 | 
		
	
		
			
			| 
				1250
			 | 
			
				1254
			 | 
			
			
				   fi 
			 | 
		
	
		
			
			| 
				1251
			 | 
			
				1255
			 | 
			
			
				   apt-get -y --force-yes install dovecot-common dovecot-imapd 
			 | 
		
	
		
			
			| 
				1252
			 | 
			
				1256
			 | 
			
			
				   if [ ! -f /etc/ssl/private/dovecot.key ]; then 
			 | 
		
	
		
			
			| 
				1253
			 | 
			
				
			 | 
			
			
				-	  makecert dovecot 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1257
			 | 
			
			
				+      makecert dovecot 
			 | 
		
	
		
			
			| 
				1254
			 | 
			
				1258
			 | 
			
			
				   fi 
			 | 
		
	
		
			
			| 
				1255
			 | 
			
				1259
			 | 
			
			
				   chown root:dovecot /etc/ssl/certs/dovecot.* 
			 | 
		
	
		
			
			| 
				1256
			 | 
			
				1260
			 | 
			
			
				   chown root:dovecot /etc/ssl/private/dovecot.* 
			 | 
		
	
	
		
			
			| 
				
			 | 
			
			
				@@ -1279,6 +1283,13 @@ function configure_gpg { 
			 | 
		
	
		
			
			| 
				1279
			 | 
			
				1283
			 | 
			
			
				   fi 
			 | 
		
	
		
			
			| 
				1280
			 | 
			
				1284
			 | 
			
			
				   apt-get -y --force-yes install gnupg 
			 | 
		
	
		
			
			| 
				1281
			 | 
			
				1285
			 | 
			
			
				  
			 | 
		
	
		
			
			| 
				
			 | 
			
				1286
			 | 
			
			
				+  # if gpg keys directory was previously imported from usb 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1287
			 | 
			
			
				+  if [[ $GPG_KEYS_IMPORTED == "yes" && -d /home/$MY_USERNAME/.gnupg ]]; then 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1288
			 | 
			
			
				+      sed -i "s|keyserver hkp://keys.gnupg.net|keyserver $GPG_KEYSERVER|g" /home/$MY_USERNAME/.gnupg/gpg.conf 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1289
			 | 
			
			
				+      echo 'configure_gpg' >> $COMPLETION_FILE 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1290
			 | 
			
			
				+      return 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1291
			 | 
			
			
				+  fi 
			 | 
		
	
		
			
			| 
				
			 | 
			
				1292
			 | 
			
			
				+ 
			 | 
		
	
		
			
			| 
				1282
			 | 
			
				1293
			 | 
			
			
				   if [ ! -d /home/$MY_USERNAME/.gnupg ]; then 
			 | 
		
	
		
			
			| 
				1283
			 | 
			
				1294
			 | 
			
			
				       mkdir /home/$MY_USERNAME/.gnupg 
			 | 
		
	
		
			
			| 
				1284
			 | 
			
				1295
			 | 
			
			
				       echo 'keyserver hkp://keys.gnupg.net' >> /home/$MY_USERNAME/.gnupg/gpg.conf 
			 |