[bug-notifications] [openssl_rt 0004807]: Migration of SSL certs fails on upgrade

Mantis Bug Tracker noreply at opencsw.org
Thu Jul 21 17:04:12 CEST 2011

The following issue requires your FEEDBACK. 
Reported By:                domcleal
Assigned To:                yann
Project:                    openssl_rt
Issue ID:                   4807
Category:                   upgrade
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     feedback
Date Submitted:             2011-07-19 15:16 CEST
Last Modified:              2011-07-21 17:04 CEST
Summary:                    Migration of SSL certs fails on upgrade
When upgrading with pkgutil from
openssl_rt-0.9.8,REV=2007.12.26_rev=g-SunOS5.8-sparc-CSW to
openssl_rt-0.9.8r,REV=2011.02.12-SunOS5.9-sparc-CSW, the package preinstall
performs a migration of SSL certs from /opt/csw/ssl/certs to

This causes the pkgadd to fail, as it also removes the /opt/csw/ssl/certs

Custom certificates have been installed in /opt/csw/ssl/certs/.
They will be moved under /opt/csw/etc/ssl/certs.
see /opt/csw/share/doc/openssl_rt/README.CSW for more information
about CA.
WARNING: /opt/csw/ssl/certs <no longer a directory>
mv: cannot rename /opt/csw/ssl/certs/demo to /opt/csw/etc/ssl/certs/demo:
File exists
mv: cannot rename /opt/csw/ssl/certs/expired to
/opt/csw/etc/ssl/certs/expired: File exists
rmdir: directory "/opt/csw/ssl/certs": Directory not empty
WARNING: /opt/csw/ssl/certs may not overwrite a populated directory.
pkgadd: ERROR: /opt/csw/ssl/certs could not be installed.
Updating certificates in /opt/csw/etc/ssl/certs...done.
Installation of <CSWosslrt> partially failed.

Removing the "rmdir /opt/csw/ssl/certs" from the preinstall lets the
upgrade go through, indicating perhaps that the directory should be left in

 (0009202) yann (manager) - 2011-07-21 17:04
I uploaded a new set of openssl package in my experimental repository:

The new openssl_rt package should fix your issue. Could you try theses
packages and give me some feedback ?

More information about the bug-notifications mailing list