Import GingerCal 1.0 source

bridge/make-cert.sh

@@ -0,0 +1,15 @@
+#!/bin/sh
+# Creates the bridge's self-signed certificate (10 years) and prints the SHA-256
+# fingerprint to compare with what the phone shows when you tap "Trust".
+set -eu
+cd "$(dirname "$0")"
+mkdir -p certs
+NAME=${1:-caldav-bridge}
+if [ ! -f certs/bridge.key ]; then
+  openssl req -x509 -newkey rsa:2048 -sha256 -days 3650 -nodes \
+    -keyout certs/bridge.key -out certs/bridge.crt -subj "/CN=$NAME" 2>/dev/null
+  chmod 600 certs/bridge.key
+  echo "Created certs/bridge.crt"
+fi
+echo "SHA-256 fingerprint (must match the phone):"
+openssl x509 -in certs/bridge.crt -noout -fingerprint -sha256 | cut -d= -f2