ke, 2005-10-05 kello 07:37 +0000, Gerrit Pape kirjoitti: > On Wed, Sep 28, 2005 at 03:17:10PM +0300, Lars Wirzenius wrote: > > bincimap's postinst creates /etc/ssl/certs/imapd.pem, but there is no > > prerm to remove it when the package is purged. This means some cruft is > > left on the filesystem. > > Hmm, I'm not sure. It may well be that /etc/ssl/certs/imapd.pem is > used/created by other imap-server packages too. On installation the > bincimap package checks for the existence of the certificate, and only > creates a sample if it doesn't exist. Removing the sample atomatically > may break another currently installed imap-server package. > > Any suggestions?
I suggested in bug #330519 that there should be tools to create and remove certificates. These tools would then take care of handling cases such as the same certificate being shared by several services, or the sysadmin changing the certificate (by getting a CA signature, for example). This has come up with several packages now, so I'll bring it up on -devel for more general discussion. In the mean while, this bug can wait. (I don't actually understand much about SSL certificates, so my suggestions are vague. I'd be happy to help write the tools with someone who understands the certificates as such.) -- Good news at once. Bad news never in the evening or on Friday. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
