1 files changed, 73 insertions, 0 deletions
diff --git a/debian/kea-ctrl-agent.config b/debian/kea-ctrl-agent.config
new file mode 100644
index 0000000..00e4013
--- /dev/null
+++ b/debian/kea-ctrl-agent.config
@@ -0,0 +1,73 @@
+#!/bin/sh
+
+set -e
+
+. /usr/share/debconf/confmodule
+
+ask_for_password() {
+    while :; do
+        RET=""
+        db_input high kea-ctrl-agent/kea_api_password || true
+        db_go || true
+        db_get kea-ctrl-agent/kea_api_password
+        if [ -z "$RET" ]; then
+            # empty passwords result in no action
+            break
+        fi
+        API_PASSWORD="$RET"
+        db_input high kea-ctrl-agent/kea_api_password_again || true
+        db_go || true
+        db_get kea-ctrl-agent/kea_api_password_again
+        if [ "$RET" = "$API_PASSWORD" ]; then
+            API_PASSWORD=""
+            break
+        fi
+        db_fset kea-ctrl-agent/password_mismatch seen false
+        db_input critical kea-ctrl-agent/password_mismatch || true
+        db_set kea-ctrl-agent/kea_api_password ""
+        db_set kea-ctrl-agent/kea_api_password_again ""
+        db_go || true
+    done
+}
+
+gen_random_pw() {
+    head -c 15 /dev/urandom | base64 | tr -d '[:space:]'
+}
+
+
+RET=""
+choice=""
+reconfigure=""
+
+if [ "${1}" = "configure" ] || [ "${1}" = "reconfigure" ]; then
+    if [ "${1}" = "reconfigure" ] || [ -n "${DEBCONF_RECONFIGURE}" ]; then
+        reconfigure="yes"
+    fi
+    # only ask questions on:
+    # - reconfigure
+    # - fresh install
+    # - upgrade from pre-debconf package (lt: empty version is "earlier", so
+    #   this covers the fresh install case too)
+    if [ -n "${reconfigure}" ] || dpkg --compare-versions "$2" lt "2.2.0-5ubuntu2~"; then
+        db_input high kea-ctrl-agent/make_a_choice || true
+        db_go || true
+
+        db_get kea-ctrl-agent/make_a_choice
+        choice="${RET}"
+
+        case "${choice}" in
+            unconfigured)
+                # nothing to do
+            ;;
+            configured_password)
+                ask_for_password
+            ;;
+            configured_random_password)
+                db_set kea-ctrl-agent/kea_api_password "$(gen_random_pw)"
+            ;;
+            *)
+                # shouldn't happen, so it's the same as "unconfigured" above
+            ;;
+        esac
+    fi
+fi