[SCM] quassel packaging branch, master, updated. debian/1%0.10.0-2.4-20-gfa6dbfa

[Felix Geyer]

Gitweb-URL: http://git.debian.org/?p=pkg-kde/kde-extras/quassel.git;a=commitdiff;h=ac03ff4

The following commit has been merged in the master branch:
commit ac03ff469fc2513612f2efb75d04e03c17548540
Author: Felix Geyer <fgeyer at debian.org>
Date:   Sun Sep 6 20:00:29 2015 +0200

    Create the SSL certificate as user quasselcore to avoid a symlink race condition.
    
    Closes: #753737
---
 debian/changelog             | 2 ++
 debian/quassel-core.postinst | 5 ++---
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/debian/changelog b/debian/changelog
index b1567eb..336fe7f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -16,6 +16,8 @@ quassel (1:0.12.2-1) UNRELEASED; urgency=medium
     - Turn quassel-kde4 and quassel-client-kde4 into transitional packages.
   * Enable parallel building.
   * Pass --fail-missing to dh_install.
+  * Create the SSL certificate as user quasselcore to avoid a symlink race
+    condition. (Closes: #753737)
 
   [ Scott Kitterman ]
   * Add systemd service file and associated changes for quasselcore.
diff --git a/debian/quassel-core.postinst b/debian/quassel-core.postinst
index 8d51086..b05b47f 100644
--- a/debian/quassel-core.postinst
+++ b/debian/quassel-core.postinst
@@ -40,9 +40,8 @@ fi
 # FIXME: Not over-writing existing certs, but need to (someday) replace old certs
 if [ ! -e $QUASSEL_CERT ] ; then
   echo "Generating SSL certificate as $QUASSEL_CERT ..."
-  openssl req -x509 -nodes -batch -days 680 -newkey rsa -keyout \
-  $QUASSEL_CERT -out $QUASSEL_CERT
-  chown $QUASSEL_USER:$QUASSEL_GROUP $QUASSEL_CERT
+  su $QUASSEL_USER -s /bin/sh -c "openssl req -x509 -nodes -batch -days 680 -newkey rsa \
+    -keyout $QUASSEL_CERT -out $QUASSEL_CERT"
 fi
 
 chmod 0440 $QUASSEL_CERT

-- 
quassel packaging