#!/bin/sh

CERTS_DIR=/certs
CA_CERT_FILE="${CERTS_DIR}/ca/cert.pem"
CA_KEY_FILE="${CERTS_DIR}/ca/key.pem"

mkdir -p "${CERTS_DIR}/ca"
[ -e "${CA_CERT_FILE}" -a -e "${CA_KEY_FILE}" ] || \
    openssl req -new -newkey rsa:2048 -sha256 -days 1500 -nodes -x509 \
        -extensions v3_ca -subj "/C=/ST=/L=/O=/OU=/CN=proxy" \
        -keyout "${CA_KEY_FILE}" -out "${CA_CERT_FILE}"

mkdir -p /static
cp -f "${CA_CERT_FILE}" /static/ca.crt

[ -d "${CERTS_DIR}/ssl_db" ] || /usr/lib/squid/security_file_certgen -c \
    -s "${CERTS_DIR}/ssl_db" -M 4MB
chown -R squid:squid "${CERTS_DIR}"

[ -e /var/cache/squid/swap.state ] || squid -z
while [ -e /var/run/squid.pid ] ; do
    sleep 1
done

syslogd
darkhttpd /static --port 9999 --chroot --daemon \
    --uid nobody --gid nobody \
    --no-listing 
squid -s

tail -f /var/log/messages