From 6555042a881a49b50f8333f8aad04de21d13687c Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Tue, 27 May 2025 14:28:16 -0400
Subject: [PATCH] add unified session ticket keys file for dnsdist

---
 create-session-ticket-keys | 2 ++
 rotate-session-ticket-keys | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/create-session-ticket-keys b/create-session-ticket-keys
index c3f3247..25dbc49 100755
--- a/create-session-ticket-keys
+++ b/create-session-ticket-keys
@@ -7,3 +7,5 @@ cd /etc/session-ticket-keys
 for i in {1..4}; do
     head -c 80 </dev/random >$i.key
 done
+
+cat {1..4}.key > keys
diff --git a/rotate-session-ticket-keys b/rotate-session-ticket-keys
index 9882b35..72e9229 100755
--- a/rotate-session-ticket-keys
+++ b/rotate-session-ticket-keys
@@ -10,4 +10,7 @@ rsync -I 4.key 3.key
 head -c 80 </dev/random >new.key
 rsync -I new.key 4.key
 rm new.key
+cat {1..4}.key > keys.new
+rsync -I keys.new keys
+rm keys.new
 nginx -s reload