[debian-edu-commits] [Git][debian-edu/debian-edu-config][buster] 4 commits: Add policy file share/firefox-esr/distribution/policies.json

[WolfgangSchweer]

WolfgangSchweer pushed to branch buster at Debian Edu / debian-edu-config


Commits:
3d789240 by Wolfgang Schweer at 2020-04-13T12:11:02+02:00
Add policy file share/firefox-esr/distribution/policies.json

This makes sure that the Debian-Edu_rootCA.crt file gets installed as trusted
certificate at first launch of firefox-esr and thunderbird. The policy is valid
for both firefox-esr and thunderbird as of version 68.2.x (thunderbird still
needs to migrate to bullseye, tested with sid version).

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
c35ee3f2 by Wolfgang Schweer at 2020-04-13T12:43:57+02:00
Add lib/thunderbird/distribution/policies.json

cherry-picked from master branch commit 892593c9

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
e752feee by Wolfgang Schweer at 2020-04-13T13:11:30+02:00
Adjust Makefile to reflect the policies files related changes.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -
02931273 by Wolfgang Schweer at 2020-04-13T13:34:34+02:00
Add changelog entries for policies files related changes.

Signed-off-by: Wolfgang Schweer <wschweer at arcor.de>

- - - - -


4 changed files:

- Makefile
- debian/changelog
- + lib/thunderbird/distribution/policies.json
- + share/firefox-esr/distribution/policies.json


Changes:

=====================================
Makefile
=====================================
@@ -161,6 +161,7 @@ SYSCONFFILES = \
 	nbd-server/conf.d/debian-edu.conf
 
 LIBFILES = \
+	thunderbird/distribution/policies.json \
 	mime/packages/debian-edu-mailcap
 
 SYSCONFSCRIPTS = \
@@ -246,6 +247,7 @@ install: install-testsuite
 	install -d $(DESTDIR)$(ldapdir)
 	install -d $(DESTDIR)$(dhcpdir)
 	install -d $(DESTDIR)$(mailcapdir)
+	install -d $(DESTDIR)$(libdir)
 
 # program's manpages are autodetected. 
 	set -e ; for prog in $(PROGS); do \
@@ -399,6 +401,7 @@ install: install-testsuite
 		share/debian-edu-config/pam-config-mkhomedir \
 		share/debian-edu-config/pam-config-nopwdchange \
 		share/debian-edu-config/pam-nopwdchange.py \
+		share/firefox-esr/distribution/policies.json \
 	; do \
 		$(INSTALL_DATA) $$f $(DESTDIR)/usr/$$f ; \
 	done


=====================================
debian/changelog
=====================================
@@ -1,3 +1,15 @@
+debian-edu-config (2.10.65+deb10u5) UNRELEASED; urgency=medium
+
+  * Add policies files for Firefox-ESR and Thunderbird to fix the TLS/SSL setup.
+    This makes sure that the Debian-Edu_rootCA.crt file gets installed as
+    trusted certificate for Firefox-ESR and Thunderbird. (Already fixed in
+    Bullseye.)
+    - Add share/firefox-esr/distribution/policies.json (Closes: #944450).
+    - Add lib/thunderbird/distribution/policies.json (Closes: #955978).
+    - Adjust Makefile accordingly.
+
+ -- Wolfgang Schweer <wschweer at arcor.de>  Mon, 13 Apr 2020 13:14:43 +0200
+
 debian-edu-config (2.10.65+deb10u4) buster; urgency=medium
 
   [ Dominik George ]


=====================================
lib/thunderbird/distribution/policies.json
=====================================
@@ -0,0 +1,11 @@
+{
+  "policies": {
+    "Certificates": {
+      "ImportEnterpriseRoots": true,
+      "Install": [
+        "/etc/ssl/certs/Debian-Edu_rootCA.crt"
+      ]
+    }
+  }
+}
+


=====================================
share/firefox-esr/distribution/policies.json
=====================================
@@ -0,0 +1,12 @@
+{
+  "policies": {
+    "Certificates": {
+      "ImportEnterpriseRoots": true,
+      "Install": [
+        "/etc/ssl/certs/Debian-Edu_rootCA.crt"
+      ]
+    },
+    "NewTabPage": false,
+    "OverrideFirstRunPage": ""
+  }
+}
\ No newline at end of file



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/798643185a075b8165436755ed41fd849cbc7a90...02931273c22327e1ff322b539a70cde53542b379

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-config/-/compare/798643185a075b8165436755ed41fd849cbc7a90...02931273c22327e1ff322b539a70cde53542b379
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20200414/2d6785f5/attachment-0001.html>