openssh/debian/adjust-openssl-dependencies

37 lines
1.2 KiB
Bash
Executable File

#! /bin/sh
# Attempt to tighten libssl dependencies to match the check in entropy.c.
# Must be run after dpkg-shlibdeps.
client=debian/openssh-client.substvars
server=debian/openssh-server.substvars
libssl_version="$(dpkg-query -W libssl-dev 2>/dev/null | cut -f2)"
if [ -z "$libssl_version" ]; then
echo "Can't find libssl-dev version; leaving dependencies alone."
exit 0
fi
libssl_version="$(echo "$libssl_version" | sed 's/[a-z-].*//')"
libssl_package="$(sed -n 's/.*[= ]\(libssl[0-9][a-z0-9+.-]*\).*/\1/p' "$client")"
if [ "$libssl_package" ]; then
new_dep="$libssl_package (>= $libssl_version)"
sed -i "/^shlibs:Depends=/s/\$/, $new_dep/" "$client"
sed -i "/^shlibs:Depends=/s/\$/, $new_dep/" "$server"
fi
client_udeb=debian/openssh-client-udeb.substvars
server_udeb=debian/openssh-server-udeb.substvars
libcrypto_package="$(sed -n 's/.*[= ]\(libcrypto[0-9][a-z0-9+.-]*\).*/\1/p' "$client_udeb")"
if [ "$libcrypto_package" ]; then
new_dep="$libcrypto_package (>= $libssl_version)"
if [ -e "$client_udeb" ]; then
sed -i "/^shlibs:Depends=/s/\$/, $new_dep/" "$client_udeb"
fi
if [ -e "$server_udeb" ]; then
sed -i "/^shlibs:Depends=/s/\$/, $new_dep/" "$server_udeb"
fi
fi
exit 0