#!/bin/sh

# Ensure that PRNG is adequately seeded.
[ -s /etc/raddb/certs/dh ] ||\
  /usr/local/bin/envuidgid stunnel \
      /usr/bin/openssl gendh > /etc/raddb/certs/dh
[ -s /etc/raddb/certs/random ] ||\
  /usr/local/bin/envuidgid stunnel \
      /bin/dd if=/dev/urandom of=/etc/raddb/certs/random bs=1k count=1