15
15
# If prerm fails during replacement due to conflict:
16
16
# <postinst> abort-remove in-favour <new-package> <version>
18
20
# Update the initial RAM file system image
21
if [ -x /usr/sbin/update-initramfs ]; then
22
update-initramfs -u -k all
23
update-initramfs -u -k all
25
25
if dpkg --compare-versions "$2" lt-nl "1.0.10-1"; then
26
26
# Make old initrd.img files unreadable too, in case they were
33
33
# Add user and group
35
35
# Rename old "mandos" user and group
36
case "`getent passwd mandos`" in
37
*:Mandos\ password\ system,,,:/nonexistent:/bin/false)
38
usermod --login _mandos mandos
39
groupmod --new-name _mandos mandos
36
if dpkg --compare-versions "$2" lt "1.0.3-1"; then
37
case "`getent passwd mandos`" in
38
*:Mandos\ password\ system,,,:/nonexistent:/bin/false)
39
usermod --login _mandos mandos
40
groupmod --new-name _mandos mandos
43
45
# Create new user and group
44
46
if ! getent passwd _mandos >/dev/null; then
45
47
adduser --system --force-badname --quiet --home /nonexistent \
54
56
-a -r /etc/keys/mandos/seckey.txt ]; then
57
if [ -x /usr/sbin/mandos-keygen ]; then
63
if [ -r /etc/keys/mandos/dhparams.pem ]; then
66
# Create a Diffe-Hellman parameters file
67
DHFILE="`mktemp -t mandos-client-dh-parameters.XXXXXXXXXX.pem`"
68
# First try certtool from GnuTLS
69
if ! certtool --generate-dh-params --sec-param high \
70
--outfile "$DHFILE"; then
71
# Otherwise try OpenSSL
72
if ! openssl genpkey -genparam -algorithm DH -out "$DHFILE" \
73
-pkeyopt dh_paramgen_prime_len:3072; then
74
# None of the commands succeded; give up
79
sed --in-place --expression='0,/^-----BEGIN DH PARAMETERS-----$/d' \
81
sed --in-place --expression='1i-----BEGIN DH PARAMETERS-----' \
83
cp --archive "$DHFILE" /etc/keys/mandos/dhparams.pem
64
89
add_mandos_user "$@"
91
create_dh_params "$@" || :
66
92
update_initramfs "$@"
93
if dpkg --compare-versions "$2" lt-nl "1.7.7-1"; then
94
PLUGINHELPERDIR=/usr/lib/$(dpkg-architecture -qDEB_HOST_MULTIARCH 2>/dev/null)/mandos/plugin-helpers
95
if ! dpkg-statoverride --list "$PLUGINHELPERDIR" \
97
chmod u=rwx,go= -- "$PLUGINHELPERDIR"
99
if ! dpkg-statoverride --list /etc/mandos/plugin-helpers \
100
>/dev/null 2>&1; then
101
chmod u=rwx,go= -- /etc/mandos/plugin-helpers
68
105
abort-upgrade|abort-deconfigure|abort-remove)