[Pkg-openssl-devel] Bug#983722: libssl1.1: drop upgrade support from old-old-old-stable from maintainer script
Helmut Grohne
helmut at subdivi.de
Sun Feb 28 20:26:28 GMT 2021
Package: libssl1.1
Version: 1.1.1j-1
Tags: patch
User: debian-dpkg at lists.debian.org
Usertags: dpkg-root-support
The libssl1.1 package ships a maintainer script whose entire purpose is
supporting upgrades from old-old-old-stable. Since Debian does not
support skipping releases, it seems like this code can be safely
dropped. The good thing about dropping it is that code that isn't there
doesn't have to support DPKG_ROOT. Please consider applying the attached
patch.
Helmut
-------------- next part --------------
diff --minimal -Nru openssl-1.1.1j/debian/changelog openssl-1.1.1j/debian/changelog
--- openssl-1.1.1j/debian/changelog 2021-02-16 20:50:01.000000000 +0100
+++ openssl-1.1.1j/debian/changelog 2021-02-28 21:21:43.000000000 +0100
@@ -1,3 +1,11 @@
+openssl (1.1.1j-1.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Drop maintainer script for upgrading libssl1.1 from old-old-old-stable.
+ (Closes: #-1)
+
+ -- Helmut Grohne <helmut at subdivi.de> Sun, 28 Feb 2021 21:21:43 +0100
+
openssl (1.1.1j-1) unstable; urgency=medium
* New upstream version.
diff --minimal -Nru openssl-1.1.1j/debian/libssl1.1.postinst openssl-1.1.1j/debian/libssl1.1.postinst
--- openssl-1.1.1j/debian/libssl1.1.postinst 2021-02-16 20:31:27.000000000 +0100
+++ openssl-1.1.1j/debian/libssl1.1.postinst 1970-01-01 01:00:00.000000000 +0100
@@ -1,207 +0,0 @@
-#!/bin/sh
-
-. /usr/share/debconf/confmodule
-
-set -e
-
-package_name()
-{
- echo $(basename $0 .postinst)
-}
-
-# element() is a helper function for file-rc:
-element() {
- local element list IFS
-
- element="$1"
-
- [ "$2" = "in" ] && shift
- list="$2"
- [ "$list" = "-" ] && return 1
- [ "$list" = "*" ] && return 0
-
- IFS=","
- set -- $list
- case $element in
- "$1"|"$2"|"$3"|"$4"|"$5"|"$6"|"$7"|"$8"|"$9")
- return 0
- esac
- return 1
-}
-
-# filerc (runlevel, service) returns /etc/init.d/service, if service is
-# running in $runlevel:
-filerc() {
- local runlevel basename
- runlevel=$1
- basename=$2
- while read LINE
- do
- case $LINE in
- \#*|"") continue
- esac
-
- set -- $LINE
- SORT_NO="$1"; STOP="$2"; START="$3"; CMD="$4"
- [ "$CMD" = "/etc/init.d/$basename" ] || continue
-
- if element "$runlevel" in "$START" || element "S" in "$START"
- then
- echo "/etc/init.d/$basename"
- return 0
- fi
- done < /etc/runlevel.conf
- echo ""
-}
-
-if [ "$1" = "configure" ]
-then
- if [ ! -z "$2" ]; then
- if dpkg --compare-versions "$2" lt 1.0.1g-2; then
- echo -n "Checking for services that may need to be restarted..."
- check="amanda-server anon-proxy apache2 apache-ssl"
- check="$check apf-firewall asterisk bacula-director-common"
- check="$check bacula-fd bacula-sd bind9 bip boinc-client"
- check="$check boxbackup-client boxbackup-server bozo cfengine2"
- check="$check cfengine3 citadel-server clamav-daemon clamav-freshclam"
- check="$check clamcour collectd-core conserver-server courier-imap-ssl"
- check="$check courier-mta-ssl courier-pop-ssl cyrus21-imapd"
- check="$check cyrus21-pop3d cyrus-common cyrus-imspd dovecot-core"
- check="$check ejabberd exim4 fetchmail freeradius ftpd-ssl gatling"
- check="$check globus-gatekeeper inn inn2 libapache-mod-ssl lighttpd lldpd"
- check="$check lwresd monit myproxy-server nagios-nrpe-server nginx-common"
- check="$check ntp openntpd openssh-server openvpn partimage-server"
- check="$check postfix postgresql-7.4 postgresql-8.0 postgresql-8.1"
- check="$check postgresql-8.2 postgresql-9.1 postgresql-9.2 postgresql-9.3"
- check="$check proftpd proftpd-ldap proftpd-basic"
- check="$check proftpd-mysql proftpd-pgsql racoon sendmail slapd"
- check="$check spamassassin ssh-nonfree stunnel4 syslog-ng tor unbound"
- check="$check vsftpd"
- # Only get the ones that are installed, and configured
- check=$(dpkg -s $check 2> /dev/null | egrep '^Package:|^Status:' | awk '{if ($1 ~ /^Package:/) { package=$2 } else if ($0 ~ /^Status: .* installed$/) { print package }}')
- # init script rewrites
- check=$(echo $check | sed "
- # The name of proftpd-{ldap,mysql,pgsql,basic} init script is
- # same as "proftpd".
- s/proftpd-.*/proftpd/g;
- # dovecot-core ships its init script, but the
- # script name is dovecot for dovecot-{imapd,pop3d}.
- s/dovecot-core/dovecot/g;
- # openssh-server's init script it called ssh
- s/openssh-server/ssh/g;
- # bacula-director-common's init is bacula-director
- s/bacula-director-common/bacula-director/g;
- # citadel server
- s/citadel-server/citadel/g;
- # collectd
- s/collectd-core/collectd/g;
- # cyrus
- s/cyrus-common/cyrus-imapd/g;
- # nginx
- s/nginx-common/nginx/g;
- ")
- echo "done."
- fi
- if dpkg --compare-versions "$2" lt 1.0.1g-3; then
- echo -n "Checking for services that may need to be restarted..."
- check2="chef chef-expander chef-server-api"
- check2="$check2 chef-solr pound postgresql-common"
- check2="$check2 prosody puppet puppetmaster snmpd"
-
- # Only get the ones that are installed, and configured
- check2=$(dpkg -s $check2 2> /dev/null | egrep '^Package:|^Status:' | awk '{if ($1 ~ /^Package:/) { package=$2 } else if ($0 ~ /^Status: .* installed$/) { print package }}')
- # init script rewrites
- check2=$(echo $check2 | sed -r "
- s/chef\s/chef-client/g;
- s/chef-server-api/chef-server/g;
- s/postgresql-common/postgresql/g;
- ")
- echo "done."
- if [ -n "$check2" ]; then
- check="$check $check2"
- fi
- fi
-
- if [ -n "$check" ]; then
- db_version 2.0
- echo "Checking init scripts..."
- for service in $check; do
- if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then
- idl=$(ls /etc/init.d/${service} 2> /dev/null | head -n 1)
- if [ -n "$idl" ] && [ -x $idl ]; then
- services="$service $services"
- else
- echo "WARNING: init script for $service not found."
- fi
- else
- if [ -f /usr/share/file-rc/rc ] || [ -f /usr/lib/file-rc/rc ] && [ -f /etc/runlevel.conf ]; then
-
- idl=$(filerc $rl $service)
- else
- idl=$(ls /etc/rc${rl}.d/S??${service} 2> /dev/null | head -n 1)
- fi
- if [ -n "$idl" ] && [ -x $idl ]; then
- services="$service $services"
- fi
- fi
- done
- if [ -n "$services" ]; then
- db_input critical libraries/restart-without-asking || true
- db_go || true
- db_get libraries/restart-without-asking
- if [ "x$RET" != xtrue ]; then
- db_reset libssl1.1/restart-services
- db_set libssl1.1/restart-services "$services"
- db_input critical libssl1.1/restart-services || true
- db_go || true
- db_get libssl1.1/restart-services
-
- if [ "x$RET" != "x" ]
- then
- services=$RET
- answer=yes
- else
- answer=no
- fi
- else
- answer=yes
- fi
- echo
- if [ "$answer" = yes ] && [ "$services" != "" ]; then
- echo "Restarting services possibly affected by the upgrade:"
- failed=""
- rl=$(runlevel | sed 's/.*\ //')
- for service in $services; do
- if [ -x "`which invoke-rc.d 2>/dev/null`" ]; then
- idl="invoke-rc.d ${service}"
- elif [ -f /usr/share/file-rc/rc ] || [ -f /usr/lib/file-rc/rc ] && [ -f /etc/runlevel.conf ]; then
- idl=$(filerc $rl $service)
- else
- idl=$(ls /etc/rc${rl}.d/S??${service} 2> /dev/null | head -n 1)
- fi
-
- if ! $idl restart; then
- failed="$service $failed"
- fi
- done
- echo
- if [ -n "$failed" ]; then
- db_subst libssl1.1/restart-failed services "$failed"
- db_input critical libssl1.1/restart-failed || true
- db_go || true
- else
- echo "Services restarted successfully."
- fi
- echo
- fi
- else
- echo "Nothing to restart."
- fi
- # Shut down the frontend, to make sure none of the
- # restarted services keep a connection open to it
- db_stop
- fi # end upgrading and $2 lt 0.9.8c-2
- fi # Upgrading
-fi
-
-#DEBHELPER#
More information about the Pkg-openssl-devel
mailing list