Bugzilla Bug 201673

Installation of SSL certificates in src_install might expose the secret
keys when building binary packages (bug 174759).

Please update the package mentioned in this bug's title to use the new
"install_cert" function of ssl-cert.eclass, and use it only in
your pkg_postinst or pkg_config.

This bug is for keeping track of specific changes to your ebuilds
and stabling, general questions about this should be discussed in
bug 174759.

Our aim is to have fixed ebuilds in the tree by Dec. 23rd, otherwise
we will commit this minor change. Stabling should be done two weeks after the
commit, at last around Jan, 6th.

> Our aim is to have fixed ebuilds in the tree by Dec. 23rd, otherwise
> we will commit this minor change.

Just a reminder; I would prefer if package maintainers fixed this for their
packages. So I'll wait for another week before committing the change myself.

Fix in cvs

(In reply to comment #2)
> Fix in cvs

Not really... The final goal is that we remove docert() from ssl-cert.eclass.
So I guess it should be something like the following:

pkg_postinst() {
    install_cert /etc/nufw/{nufw,nuauth}
}

Reopening.

Fix again in cvs
Thanks

> Fix again in cvs

Thank you.

@security: Package was never stable.