Bugzilla Bug 14687

On livecd, partimaged is compiled with SSL support and requires its
certificate in  /etc/partimaged. There is no such files in /etc/partimaged
so daemon refuses to start.
 To fix this, you either need to create such certificate or disable SSL
 support, as you wish.
 To create certificate, run "make certificates" then copy partimaged.key and
 partimaged.cert onto cdrom in /etc/partimaged.
To disable SSL, just do it:
./configure --disable-ssl

btw. as a quick-fix i just disabled ssl support in the ebuild file (using
./configure --disable-ssl). but then, partimaged still won't work. do the
following to make it work (did the trick for me at least):

# vi /etc/partimaged/partimagedusers
add allowed usernames (must exist in /etc/passwd) one per line. make sure, no
other lines are uncommented.
# useradd partimag
# passwd partimag
(set a password -> for safety reasons, not sure whether it's really required)
# chown partimag.users /etc/partimaged/partimagedusers
# partimaged &

Not only on the livecd, but also at my gentor running system is the same -
Gentoo 1.4 rc1-rc2, partimage v0.6.2

There are no certificates at /etc/partimaged, so partimaged refuses to start:

---schnipp---
# partimaged
error when verifying /etc/partimaged/partimaged.key, check logfile or help
[..]
---schnapp---

I'd like to build it with ssl enabled, so that the keys are generated by ebuild
if possible. What is the commandline to do that without fiddling in the ebuild
file?

greetings,
Sascha

Me again:

Moreover, as the opener of this thread said, I tried to use ssl to emerge partimage again - in two ways.

- use="ssl" emerge partimage at the command line
- having ssl in /etc/make.config USE-Variable settings

...but there is no certificate at /etc/partimage nor in the filesystem elsewhere.

This leads me to the assumption that ssl is totally disabled at the ebuild file, right?

1. When will this be modified?
2. When will the Gentoo-Basic-x86-1.4_rc2.iso be modified, to contain certificates for partimage?

greetings,
Sascha

I'm having thsi problem too and haven't been able to separately generate the
keys. I want SSL working, why not just add 'make certificates' to the ebuild?

fixed with the new 0.6.4 version that is now in portage.
after you install it, read the postinst instructions on how to create the required SSL certificates.