[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#772163: Re: Bug#772163: dovecot-core: postinst should ship code to check preseeding and create ssl-cert if asked for.



On Fri, 5 Dec 2014, Petter Reinholdtsen wrote:

I do not quite understand exactly what you propose, when the debconf
question and code has been dropped from dovecot-core.  Debian Edu depend
on a SSL enabled IMAP service to work using a self signed SSL
certificate after installation.  This worked a few days ago.

Cert generation was dropped in -6.

How can we
alter our preseeding to get this to work again?

The easiest way would be not to preseed at all but as you say you require an SSL enabled IMAP server that is obviously not a solution. Can you ship your own certificates in some other package and install them? Or maybe you can fork the dovecot package and add back the cert generation code to postinst.

The reason the code was removed is that it is buggy. It worked well enough for simple usage but there were enough edge cases that I got a lot of complaints. It needs to be redesigned (and ideally there should be a general Debianwide utility for managing certificates like adduser/deluser.) but that will take time and someone more expert than me and meanwhile I do not want to support the old code for the lifetime of Jessie.

Sorry for the inconvenience but dovecot is one of those packages that people mostly ignore and then suddenly there is a rush to upgrade when a stable release happens. So it doesn't get wide testing until it is too late to fix things in a more orderly manner.

--
Jaldhar H. Vyas <jaldhar@debian.org>


Reply to: