VAPID_PRIVATE_KEY_FILE := vapid-private-key.pem

PHONY: secret_key_base signing_salt vapid_private_key vapid_public_key

all: secret_key_base signing_salt vapid_private_key vapid_public_key

secret_key_base:
	@echo "Secret key base:"
	@openssl rand -base64 48

signing_salt:
	@echo -e "\nSigning salt:"
	@openssl rand -hex 4

$(VAPID_PRIVATE_KEY_FILE):
	@openssl ecparam -genkey -name prime256v1 -out $(VAPID_PRIVATE_KEY_FILE)

vapid_private_key: $(VAPID_PRIVATE_KEY_FILE)
	@echo -e "\nVapid private key:"
	@openssl ec -in $(VAPID_PRIVATE_KEY_FILE) -outform DER 2> /dev/null | tail -c +8 | head -c 32 | base64 | tr '/+' '_-' | tr -d '=' | tr -d '\n'

vapid_public_key: $(VAPID_PRIVATE_KEY_FILE)
	@echo -e "\n\nVapid public key:"
	@openssl ec -in $(VAPID_PRIVATE_KEY_FILE) -pubout -outform DER 2> /dev/null | tail -c 65 | base64 | tr '/+' '_-' | tr -d '=' | tr -d '\n'