-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sat, 17 Mar 2001 11:47:09 -0800 Source: sslwrap Binary: sslwrap Architecture: source i386 Version: 2.0.6-3.1 Distribution: unstable Urgency: low Maintainer: Raphael Bossek <bossekr@debian.org> Changed-By: Luca Filipozzi <lfilipoz@debian.org> Description: sslwrap - Simple TCP service encryption using TLS/SSL Closes: 81562 81913 87350 87479 89403 Changes: sslwrap (2.0.6-3.1) unstable; urgency=low . * Non-maintainer upload (closes 1 grave, 1 serious, and 3 normal bugs) * debian/control: modified Build-Depends to use libssl-dev * debian/control: removed openssl from sslwrap's Depends * debian/rules: removed dh_suidregister (obsolete) * debian/config: removed bashism note: other bashisms appear to be fixed already (Closes: #87479) * debian/postrm: /etc/sslwrap is removed on purge (Closes: #81562) * debian/init & debian/postinst: moved some stuff from init to postinst - the ssl certificate should only need to be (re)generated on configure (i.e., the init script should not be creating the ssl certificate) - the ssl certificate generated is valid for 365 day (Closes: #89403) - the inetd.conf file should only need to be (re)populated on configure (i.e., the init script should not be modifying /etc/inetd.conf) the individual inetd entries are enabled|disabled by the init script * debian/preinst: modified to handle the new templates file * debian/template: question sslwrap/overwrite_corrupted_certfile changed from a select to a boolean to facilitate in making sslwrap not abuse debconf * debian/config: no longer abuses debconf (Closes: #87350) * debian/conffiles: debian_config is no longer a conffile * removed the maintainer's patch to s_server.c because start-stop-daemon has enough features to handle the brokeness of the upstream code and the maintainer's patch was somewhat broken - the maintainer's patch caused sslwrap to generate a pidfile *before* sslwrap tested if the port was already in use, which resulted in the pidfile for the already running sslwrap to be overwritten! - the maintainer's patch caused sslwrap to generate a pidfile; start-stop-daemon has a --make-pidfile option for cases like these - the maintainer's patch provided sslwrap with a signal handler but start-stop-daemon can be told which signal to use (i.e., --signal 9) - the maintainer's patch caused sslwrap to go into the background; start-stop-daemon has a --background option for cases like these; . **** IMPORTANT NOTE **** (you should read the rest, too!) NOTE: removing this patch has the implication that people who were calling sslwrap directly (not via inetd or via the init script) will be required to put the process in the background themselves using '&'; if this is a problem, the maintainer's patch, or portions thereof, can be reapplied ... let me know *** IMPORTANT NOTE **** . - the maintainer's patch is contained in debian/s_server.c.patch * applied my own, very minor, patch, to s_server.c to deal with the fact that the openssl library does not have the anonymous DH ciphers enabled by default; sent the patch to the upstream author (Closes: #81913) my patch is contained in debian/s_server.c.patch-lfilipoz * only two problems remain: 1) the certificate file is not regenerated when debconf settings change 2) an init script shouldn't really be modifying inetd.conf, imo Files: 33ccbbe9b9606da63d7d770cf4085a6b 611 non-US/main/net optional sslwrap_2.0.6-3.1.dsc 708f4ba0edde619d541d68922e1575f1 39676 non-US/main/net optional sslwrap_2.0.6-3.1.diff.gz bd82d4910c2d54041ad10c0a8c34a967 30376 non-US/main/net optional sslwrap_2.0.6-3.1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE6tJTRNXMyxFqCei0RAiXVAJ9Sf7bNiFPQA2fnGuKFNcxp/y5BUACfaJ7S oEwgMvygPcRf5Sw+SC8CESM= =Srw1 -----END PGP SIGNATURE----- Installed: sslwrap_2.0.6-3.1.diff.gz to pool/non-US/main/s/sslwrap/sslwrap_2.0.6-3.1.diff.gz sslwrap_2.0.6-3.1.dsc to pool/non-US/main/s/sslwrap/sslwrap_2.0.6-3.1.dsc sslwrap_2.0.6-3.1_i386.deb to pool/non-US/main/s/sslwrap/sslwrap_2.0.6-3.1_i386.deb