Package: euca2ools
Version: 2.1.3-1
Severity: normal
Tags: patch
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu saucy ubuntu-patch
Dear Maintainer,
In order to upload an image to EC2 (either with euca-bundle-vol or
euca-bundle-image), a X509 public key certificate is required. In order
to upload or bundle to Amazon, Amazon's certificate is required.
As AWS is the most popular target for usage of the euca2ools, Ubuntu
has included the ec2 certificate in /usr/share/euca2ools/cert-ec2.pem and
create a symlink to it from /etc/ssl/certs/cert-ec2.pem.
This allows the user to be able to do:
euca-bundle-vol --ec2cert /usr/share/euca2ools/cert-ec2.pem
without having to externally find Amazon's certificate.
This issue was originally raised in Ubuntu under bug 479836.
Thanks for considering the patch.
-- System Information:
Debian Release: wheezy/sid
APT prefers saucy-updates
APT policy: (500, 'saucy-updates'), (500, 'saucy-security'), (500, 'saucy'),
(100, 'saucy-backports')
Architecture: amd64 (x86_64)
Kernel: Linux 3.8.0-21-generic (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
=== added file 'debian/cert-ec2.pem'
--- debian/cert-ec2.pem 1970-01-01 00:00:00 +0000
+++ debian/cert-ec2.pem 2013-05-23 12:57:03 +0000
@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
=== modified file 'debian/copyright'
--- debian/copyright 2013-05-05 19:43:21 +0000
+++ debian/copyright 2013-05-23 13:09:19 +0000
@@ -29,3 +29,10 @@
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.
+Files: debian/cert-ec2.pem
+Copyright: Copyright Amazon.com, Inc or its affiliates.
+License: Amazon Software License
+Comment: Amazon's EC2 public certificate
+ Amazon's EC2 public certificate is copied from
+ http://s3.amazonaws.com/ec2-downloads/ec2-ami-tools.zip
+ is required to sign an image to upload and use in EC2.
=== added file 'debian/dirs'
--- debian/dirs 1970-01-01 00:00:00 +0000
+++ debian/dirs 2013-05-23 12:57:03 +0000
@@ -0,0 +1 @@
+etc/ssl/certs/
=== modified file 'debian/install'
--- debian/install 2010-01-17 21:36:04 +0000
+++ debian/install 2013-05-23 13:23:55 +0000
@@ -1 +1,2 @@
bin/* /usr/bin/
+debian/cert-ec2.pem /usr/share/euca2ools/
=== added file 'debian/links'
--- debian/links 1970-01-01 00:00:00 +0000
+++ debian/links 2013-05-23 12:57:03 +0000
@@ -0,0 +1 @@
+usr/share/euca2ools/cert-ec2.pem etc/ssl/certs/cert-ec2.pem
