[Pkg-openssl-devel] Bug#934921: openssl: Wrong regular expression in /usr/bin/c_rehash

[Andreas Gryphius]

Package: openssl
Version: 1.1.1c-1
Severity: normal

Dear Maintainer,

the perl script /usr/bin/c_rehash contains a line (#123)

FILE: foreach $fname (grep {/\.(pem)|(crt)|(cer)|(crl)$/} @flist) {

where I think the regex grouping is wrong.
Obviously it is intended to find only files with the listed suffixes.
But it also finds files with "crt" or "cer" just anywhere within the 
filename. For example it would find the file "i_am_not_a_cert_file.pdf"

My suggestion for a propper regex would be

FILE: foreach $fname (grep {/\.(pem|crt|cer|crl)$/} @flist) {

Hope this will be fixed, because I changed it locally on my debian 
stretch machine quite a while ago and stumbled over this again when 
upgrading to buster (file /usr/bin/c_rehash got silently overwritten) .

Thanks, Andreas

-- System Information:
Debian Release: 10.0
   APT prefers stable
   APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), 
LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages openssl depends on:
ii  libc6      2.28-10
ii  libssl1.1  1.1.1c-1

openssl recommends no packages.

Versions of packages openssl suggests:
ii  ca-certificates  20190110

-- no debconf information
Report will be sent to Debian Bug Tracking System <submit at bugs.debian.org>