On Thu, Jan 24, 2019 at 10:27:39PM +0100, Valentin Vidic wrote: > Password file indeed seems to be empty on stretch: > > drwxr-x--- 2 root coroqnetd 4096 Jan 24 22:22 . > drwxr-xr-x 3 root root 4096 Jan 24 22:22 .. > -rw-r----- 1 root coroqnetd 65536 Jan 24 22:22 cert8.db > -rw-r----- 1 root coroqnetd 16384 Jan 24 22:22 key3.db > -rw-r----- 1 root root 41 Jan 24 22:22 noise.txt > -rw-r----- 1 root root 0 Jan 24 22:22 pwdfile.txt > -rw-r--r-- 1 root root 4223 Jan 24 22:22 qnetd-cacert.crt > -rw-r----- 1 root root 16384 Jan 24 22:22 secmod.db > -rw-r----- 1 root root 4 Jan 24 22:22 serial.txt
Seems the magic upgrade command is: # password file should have an empty line to be accepted test -f "$db/pwdfile.txt" -a ! -s "$db/pwdfile.txt" && echo > "$db/pwdfile.txt" certutil -N -d "sql:$db" -f "$db/pwdfile.txt" -@ "$db/pwdfile.txt" -- Valentin
