#!/bin/sh

# Ensure that PRNG is adequately seeded.
[ -s /etc/raddb/certs/dh ] ||\
  /usr/bin/envuidgid stunnel \
      /usr/bin/openssl dhparam -out /etc/raddb/certs/dh 2048
[ -s /etc/raddb/certs/random ] ||\
  /usr/bin/envuidgid stunnel \
      /bin/dd if=/dev/urandom of=/etc/raddb/certs/random bs=1k count=1