1#!/bin/sh
2set -e
3
4mkdir -p /keys
5mkdir -p /data/cocoon
6
7if [ ! -f /keys/rotation.key ]; then
8 echo "Generating rotation key..."
9 /cocoon create-rotation-key --out /keys/rotation.key 2>/dev/null || true
10 if [ -f /keys/rotation.key ]; then
11 echo "✓ Rotation key generated at /keys/rotation.key"
12 else
13 echo "✗ Failed to generate rotation key"
14 exit 1
15 fi
16else
17 echo "✓ Rotation key already exists"
18fi
19
20if [ ! -f /keys/jwk.key ]; then
21 echo "Generating JWK..."
22 /cocoon create-private-jwk --out /keys/jwk.key 2>/dev/null || true
23 if [ -f /keys/jwk.key ]; then
24 echo "✓ JWK generated at /keys/jwk.key"
25 else
26 echo "✗ Failed to generate JWK"
27 exit 1
28 fi
29else
30 echo "✓ JWK already exists"
31fi
32
33echo ""
34echo "✓ Key initialization complete!"