[Pkg-cups-devel] r279 - cupsys/branches/cups-1.2-ubuntu/debian

[Martin Pitt]

Author: mpitt
Date: Tue Jun 27 14:11:18 2006
New Revision: 279

Modified:
   cupsys/branches/cups-1.2-ubuntu/debian/changelog
   cupsys/branches/cups-1.2-ubuntu/debian/cupsys.preinst

Log:
* debian/cupsys.preinst: Add transitional code to fix snakeoil SSL cert/key
  owner and mode.

Modified: cupsys/branches/cups-1.2-ubuntu/debian/changelog
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/changelog	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/changelog	Tue Jun 27 14:11:18 2006
@@ -4,8 +4,10 @@
     - Do not change owner and mode of SSL certificate, in order to not break
       the SSL snakeoil cert/key (and customized global ones). (Grrr, cups, no,
       you cannot own the world!)
+  * debian/cupsys.preinst: Add transitional code to fix snakeoil SSL cert/key
+    owner and mode.
 
- -- Martin Pitt <martin.pitt at ubuntu.com>  Tue, 27 Jun 2006 16:04:51 +0200
+ -- Martin Pitt <martin.pitt at ubuntu.com>  Tue, 27 Jun 2006 16:05:38 +0200
 
 cupsys (1.2.1-2ubuntu1) edgy; urgency=low
 

Modified: cupsys/branches/cups-1.2-ubuntu/debian/cupsys.preinst
==============================================================================
--- cupsys/branches/cups-1.2-ubuntu/debian/cupsys.preinst	(original)
+++ cupsys/branches/cups-1.2-ubuntu/debian/cupsys.preinst	Tue Jun 27 14:11:18 2006
@@ -65,6 +65,18 @@
 	if dpkg --compare-versions "$2" le-nl '1.1.99.b1.r4929-0ubuntu2'; then
 	    find /etc/cups/ppd -type f -uid 0 -exec chown cupsys '{}' \; || true
 	fi
+
+	# Fix global SSL certificate owner/mode breakage
+	if dpkg --compare-versions "$2" lt-nl '1.2.1-2ubuntu2'; then
+	    if [ -e /etc/ssl/certs/ssl-cert-snakeoil.pem ]; then
+		chown root:root /etc/ssl/certs/ssl-cert-snakeoil.pem
+		chmod 0644 /etc/ssl/certs/ssl-cert-snakeoil.pem
+	    fi
+	    if [ -e /etc/ssl/private/ssl-cert-snakeoil.key ]; then
+		chown root:ssl-cert /etc/ssl/private/ssl-cert-snakeoil.key
+		chmod 0640 /etc/ssl/private/ssl-cert-snakeoil.key
+	    fi
+	fi
     ;;
 
     abort-upgrade)