# Generate keys if they are missing
if [ ! -s /etc/xrdp/rsakeys.ini ]; then
(umask 377; /usr/bin/xrdp-keygen xrdp /etc/xrdp/rsakeys.ini >/dev/null)
chmod 400 /etc/xrdp/rsakeys.ini
fi
if [ ! -s /etc/xrdp/cert.pem ]; then
(umask 377; openssl req -x509 -newkey rsa:2048 -sha256 -nodes -days 3652 \
-keyout /etc/xrdp/key.pem \
-out /etc/xrdp/cert.pem \
-subj /C=US/ST=CA/L=Sunnyvale/O=xrdp/CN=www.xrdp.org \
-config /etc/xrdp/openssl.conf >/dev/null 2>&1)
chmod 400 /etc/xrdp/cert.pem
chmod 400 /etc/xrdp/key.pem
fi
/usr/sbin/post_service xrdp-sesman
/usr/sbin/post_service xrdp