* It turns out that the people who told me that removing a conffile in the

  preinst was sufficient to have dpkg replace it without prompting when
  moving a conffile between packages were very much mistaken. As far as I
  can tell, the only way to do this reliably is to write out the desired
  new text of the conffile in the preinst. This is gross, and requires
  shipping the text of all conffiles in the preinst too, but there's
  nothing for it. Fortunately this nonsense is only required for smooth
  upgrades from sarge.

1 files changed, 9 insertions, 0 deletions

diff --git a/debian/rules b/debian/rules
index 4d9269666..fdef12dcf 100755
--- a/debian/rules
+++ b/debian/rules
@@ -195,6 +195,10 @@ binary-openssh-client: build install
         dh_installdeb
         test ! -e debian/ssh/etc/ssh/ssh_prng_cmds \
           || echo "/etc/ssh/ssh_prng_cmds" >> debian/openssh-client/DEBIAN/conffiles
+        perl -i debian/substitute-conffile.pl \
+                ETC_SSH_MODULI debian/openssh-client/etc/ssh/moduli \
+                ETC_SSH_SSH_CONFIG debian/openssh-client/etc/ssh/ssh_config \
+                debian/openssh-client/DEBIAN/preinst
         dh_shlibdeps
         dh_gencontrol -- -V'debconf-depends=debconf (>= $(MINDEBCONFVER)) | debconf-2.0'
         dh_md5sums
@@ -229,6 +233,11 @@ endif
         dh_compress
         dh_fixperms
         dh_installdeb
+        perl -i debian/substitute-conffile.pl \
+                ETC_DEFAULT_SSH debian/openssh-server/etc/default/ssh \
+                ETC_INIT_D_SSH debian/openssh-server/etc/init.d/ssh \
+                ETC_PAM_D_SSH debian/openssh-server/etc/pam.d/ssh \
+                debian/openssh-server/DEBIAN/preinst
         dh_shlibdeps
         dh_gencontrol -- -V'debconf-depends=debconf (>= $(MINDEBCONFVER)) | debconf-2.0' \
                          -V'pam-depends=$(PAMDEP)'