[Debian-ha-maintainers] Bug#919901: Bug#919901: Bug#919901: corosync-qnetd: fails to upgrade from 'stretch': certutil: Could not set password for the slot

[Valentin Vidic]

On Thu, Jan 24, 2019 at 10:27:39PM +0100, Valentin Vidic wrote:
> Password file indeed seems to be empty on stretch:
> 
> drwxr-x--- 2 root coroqnetd  4096 Jan 24 22:22 .
> drwxr-xr-x 3 root root       4096 Jan 24 22:22 ..
> -rw-r----- 1 root coroqnetd 65536 Jan 24 22:22 cert8.db
> -rw-r----- 1 root coroqnetd 16384 Jan 24 22:22 key3.db
> -rw-r----- 1 root root         41 Jan 24 22:22 noise.txt
> -rw-r----- 1 root root          0 Jan 24 22:22 pwdfile.txt
> -rw-r--r-- 1 root root       4223 Jan 24 22:22 qnetd-cacert.crt
> -rw-r----- 1 root root      16384 Jan 24 22:22 secmod.db
> -rw-r----- 1 root root          4 Jan 24 22:22 serial.txt

Seems the magic upgrade command is:

  # password file should have an empty line to be accepted
  test -f "$db/pwdfile.txt" -a ! -s "$db/pwdfile.txt" && echo > "$db/pwdfile.txt"
  certutil -N -d "sql:$db" -f "$db/pwdfile.txt" -@ "$db/pwdfile.txt"

-- 
Valentin