From 79cf0b3654d7b597de323153eb57015cdfbd90a4 Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Mon, 1 Sep 2003 00:51:03 +0000 Subject: Debian release 3.4p1-1. --- debian/config | 86 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 86 insertions(+) create mode 100644 debian/config (limited to 'debian/config') diff --git a/debian/config b/debian/config new file mode 100644 index 000000000..0a5f42b2e --- /dev/null +++ b/debian/config @@ -0,0 +1,86 @@ +#!/bin/sh + +action=$1 +version=$2 + +if [ -d /etc/ssh-nonfree -a ! -d /etc/ssh ]; then + version=1.2.27 + cp -a /etc/ssh-nonfree /etc/ssh +fi + +# Source debconf library. +. /usr/share/debconf/confmodule +db_version 2.0 + +if [ -n "$version" ] && dpkg --compare-versions "$version" lt 1:3.0p1-1 +then + db_text medium ssh/ssh2_keys_merged +fi + +if [ -e /etc/init.d/ssh ] && ! grep -q pidfile /etc/init.d/ssh +then + db_fset ssh/use_old_init_script isdefault true + db_input medium ssh/use_old_init_script || true + db_go + + db_get ssh/use_old_init_script + [ "$RET" = "false" ] && exit 0 +else + db_set ssh/use_old_init_script true + db_fset ssh/use_old_init_script isdefault false +fi + +if [ -z "$version" -a ! -e /etc/ssh/sshd_config ] +then + db_input medium ssh/protocol2_only || true +fi + +if [ -e /etc/ssh/sshd_config ] +then + if dpkg --compare-versions "$version" lt-nl 1:1.3 ; + then db_input medium ssh/new_config || true + db_get ssh/new_config + if [ "$RET" = "true" ]; + then db_input medium ssh/protocol2_only ||true + db_input high ssh/privsep_ask ||true + else db_text high ssh/privsep_tell ||true + fi + else db_text high ssh/privsep_tell ||true + fi +else db_text high ssh/privsep_tell ||true +fi + +db_input medium ssh/SUID_client || true + +db_input medium ssh/run_sshd || true + +if [ -x /usr/sbin/in.telnetd ] && grep -q "^telnet\b" /etc/inetd.conf +then + if ! /usr/sbin/in.telnetd -? 2>&1 | grep -q ssl 2>/dev/null + then + db_input low ssh/insecure_telnetd || true + fi +fi + +key=/etc/ssh/ssh_host_key +export key +if [ -n "$version" ] && [ -f $key ] && [ ! -x /usr/bin/ssh-keygen ] && + dpkg --compare-versions "$version" lt 1.2.28 +then + # make sure that keys get updated to get rid of IDEA; preinst + # actually does the work, but if the old ssh-keygen is not found, + # it can't do that -- thus, we tell the user that he must create + # a new host key. + echo -en '\0\0' | 3<&0 sh -c \ + 'dd if=$key bs=1 skip=32 count=2 2>/dev/null | cmp -s - /dev/fd/3' || { + # this means that bytes 32&33 of the key were not both zero, in which + # case the key is encrypted, which we need to fix + db_input high ssh/encrypted_host_key_but_no_keygen || true + } +fi + + +db_text low ssh/forward_warning || true +db_go + +exit 0 -- cgit v1.2.3