Bug#574565: should remove ssl-cert group at purge if unused, and maybe add user to group

[Jonas Smedegaard <dr@jones.dk>]

Package: ssl-cert
Version: 1.0.25
Severity: serious

ssl-cert adds a group at install which is not removed again at purge.

See the package icecast2 for a proven purge routine for inspiration.

Also, since ssl-cert creates only a group, and order of install or purge
is nondeterministic, other packages cannot reliably cleanup the group if
they are purged last.

A way to solve that is for the ssl-cert package to create a dummy user
and add that to its group: Then both ssl-cert itself and packages using
it can reliably remove the group at purgte time if the group is empty.

Again, see icecast2 for example.


Kind regards,

 - Jonas


P.S.

Problem discovered during resolving of bug#574214.