#!/bin/bash

# 生成自签名证书
create_self_tls() {
    local DOMAIN="${1:-bing.com}"
    local SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"  # 脚本文件夹绝对路径
    local KEY_DIR="$SCRIPT_DIR/../tls/self-tls"
    local CONFIG_FILE="$SCRIPT_DIR/../config/config.json"
    
    # 创建存放证书的目录
    mkdir -p "$KEY_DIR"
    
    # 生成自签名证书
    openssl req -x509 -nodes -newkey ec:<(openssl ecparam -name prime256v1) \
        -keyout "$KEY_DIR/server.key" \
        -out "$KEY_DIR/server.crt" \
        -subj "/CN=$DOMAIN" \
        -days 36500
    
    # 更新config.json文件中的域名信息
    modify_json_file "$CONFIG_FILE" "inbounds[0].tls.server_name" "$DOMAIN"
}