add postinst script

to reset auth key age until the first rotation has happened, otherwise
all currently existing tickets get invalidated immediately once the
rotation code gets enabled.

disabled until first PVE 6.0 package release

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
This commit is contained in:
Fabian Grünbichler 2019-03-13 15:01:31 +01:00 committed by Thomas Lamprecht
parent 03593f3d01
commit 3a98190257

25
debian/postinst vendored Executable file
View File

@ -0,0 +1,25 @@
#!/bin/sh
set -e
#DEBHELPER#
case "$1" in
configure)
# TODO: enable for PVE 6.0
# if test -n "$2"; then
#
# # TODO: remove once PVE 7.0 is released
# if dpkg --compare-versions "$2" 'lt' '6.0-1'; then
# if test ! -e /etc/pve/authkey.pub.old; then
# # reset key age to prevent immediate invalidation of all current tickets
# touch -d "-2h" /etc/pve/authkey.pub 2>/dev/null || true
# fi
# fi
#
# fi
;;
esac
exit 0