17 # for details, see http://www.debian.org/doc/debian-policy/ or |
17 # for details, see http://www.debian.org/doc/debian-policy/ or |
18 # the debian-policy package |
18 # the debian-policy package |
19 |
19 |
20 CONF=/etc/ca-certificates.conf |
20 CONF=/etc/ca-certificates.conf |
21 DIR=/usr/share/ca-certificates |
21 DIR=/usr/share/ca-certificates |
22 CRT=schlittermann-ca.crt |
22 CRTS=$DIR/schlittermann-ca* |
23 |
23 |
24 hash() { openssl x509 -noout -in "$1" -hash; } |
24 hash() { openssl x509 -noout -in "$1" -hash; } |
25 |
25 |
26 case "$1" in |
26 case "$1" in |
27 configure) |
27 configure) |
28 # zuerst mal gucken, ob's nicht zufällig schon in /etc/ssl/certs |
28 # zuerst mal gucken, ob's nicht zufällig schon in /etc/ssl/certs |
29 # mit rumliegt von früher |
29 # mit rumliegt von früher |
30 |
30 |
31 HASH=`hash $DIR/$CRT` |
31 for CRT in $CRTS; do |
32 echo "$DIR/$CRT: $HASH" |
32 CRT=$(basename $CRT) |
|
33 HASH=`hash $DIR/$CRT` |
|
34 echo "$DIR/$CRT: $HASH" |
33 |
35 |
34 for p in /etc/ssl/certs/*.crt; do |
36 for p in /etc/ssl/certs/*.crt; do |
35 test -e "$p" || { rm -f "$p"; continue; } |
37 test -e "$p" || { rm -f "$p"; continue; } |
36 test "$HASH" = `hash "$p"` || continue |
38 test "$HASH" = `hash "$p"` || continue |
37 test -L "$p" || { rm -v "$p"; continue; } |
39 test -L "$p" || { rm -v "$p"; continue; } |
38 test `readlink "$p"` = "$DIR/$CRT" || { rm "$p"; continue; } |
40 test `readlink "$p"` = "$DIR/$CRT" || { rm "$p"; continue; } |
|
41 done |
|
42 grep -q "$CRT" "$CONF" || echo "$CRT" >> "$CONF" |
39 done |
43 done |
40 grep -q "$CRT" "$CONF" || echo "$CRT" >> "$CONF" |
44 |
41 update-ca-certificates |
45 update-ca-certificates |
42 ;; |
46 ;; |
43 |
47 |
44 abort-upgrade|abort-remove|abort-deconfigure) |
48 abort-upgrade|abort-remove|abort-deconfigure) |
45 ;; |
49 ;; |