Bug#503037: ssl-cert snakeoil generation completely broken in hurd

[Will <will.orr@mail.rit.edu>]

Package: ssl-cert
Version: 1.0.23
Severity: grave
Tags: patch
Justification: renders package unusable

When installing ssl-cert on GNU/Hurd i386, the package fails the
postinst.  Upon further inspection, I found that the bash script never
actually queries debconf for the hostname parameter it needs to config
the package.
When that function is added to the script, it still doesn't work because
the ssleay.cnf file is set up to use /dev/urandom to get random input.
Because Hurd doesn't have /dev/urandom, the hurd version of this package
needs to depend on a package called random-egd, which adds /dev/random.
Then the ssleay.cnf needs to change urandom to random.  Provided that
random-egd is installed, the attached patch adds in the necessary lines
to fix the issues.


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: hurd-i386 (i386-AT386)

Kernel: GNU-Mach 1.3.99/Hurd-0.3
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages ssl-cert depends on:
ii  adduser                      3.110       add and remove users and groups
ii  debconf [debconf-2.0]        1.5.24      Debian configuration management sy
ii  openssl                      0.9.8g-10.1 Secure Socket Layer (SSL) binary a
ii  openssl-blacklist            0.4.2       list of blacklisted OpenSSL RSA ke

ssl-cert recommends no packages.

ssl-cert suggests no packages.

-- debconf information:
  make-ssl-cert/vulnerable_prng:
  make-ssl-cert/title:
  make-ssl-cert/hostname: bearclaw

diff -Naur old/usr/sbin/make-ssl-cert new/usr/sbin/make-ssl-cert
--- old/usr/sbin/make-ssl-cert	2008-09-24 08:09:04.000000000 -0700
+++ new/usr/sbin/make-ssl-cert	2008-10-21 10:18:17.320000000 -0700
@@ -64,6 +64,7 @@
              exit 0
         fi
     fi
+    ask_via_debconf
     make_snakeoil
 fi
				   
diff -Naur old/usr/share/ssl-cert/ssleay.cnf new/usr/share/ssl-cert/ssleay.cnf
--- old/usr/share/ssl-cert/ssleay.cnf 2008-10-21 10:29:06.550000000 -0700
+++ new/usr/share/ssl-cert/ssleay.cnf 2008-10-21 01:57:13.000000000 -0700
@@ -2,7 +2,7 @@
 # SSLeay example configuration file.
 #
				      
-RANDFILE                = /dev/urandom
+RANDFILE                = /dev/random
			       
 [ req ]
 default_bits            = 1024