From 0e8f43a5216b46c61d424b5d84e4c9f026284992 Mon Sep 17 00:00:00 2001
From: Daniel Baumann <daniel.baumann@progress-linux.org>
Date: Sat, 28 Aug 2021 08:23:52 +0200
Subject: Adding additional tool packages, disabled for the time being.

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
---
 debian/control                                     |  52 +++++++
 debian/open-infrastructure-dehydrated-tools.config |  60 ++++++++
 .../open-infrastructure-dehydrated-tools.postinst  | 160 +++++++++++++++++++++
 .../open-infrastructure-dehydrated-tools.templates |  51 +++++++
 4 files changed, 323 insertions(+)
 create mode 100644 debian/open-infrastructure-dehydrated-tools.config
 create mode 100755 debian/open-infrastructure-dehydrated-tools.postinst
 create mode 100644 debian/open-infrastructure-dehydrated-tools.templates

diff --git a/debian/control b/debian/control
index d7c8788..6e08ea5 100644
--- a/debian/control
+++ b/debian/control
@@ -29,3 +29,55 @@ Description: additional tools for Apache HTTP server
  .
    * alternative icons for Apache autoindex (Tango Icons and Font Awesome
      based themes)
+
+#Package: open-infrastructure-dehydrated-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# dehydrated,
+# ${misc:Depends},
+#Provides:
+# dehydrated-tools,
+#Enhances:
+# dehydrated,
+#Description: additional tools for dehydrated Letsencrypt client
+# This package contains additional tools for the dehydrated Letsencrypt client.
+
+#Package: open-infrastructure-git-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# git,
+# ${misc:Depends},
+#Provides:
+# git-tools,
+#Enhances:
+# git,
+#Description: additional tools for Git version control system
+# This package contains additional tools for the Git version control system.
+
+#Package: open-infrastructure-irker-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# irker,
+# ${misc:Depends},
+#Provides:
+# irker-tools,
+#Enhances:
+# irker,
+#Description: additional tools for irker IRC notification daemon
+# This package contains additional tools for the irker IRC notification daemon:
+
+#Package: open-infrastructure-knot-resolver-tools
+#Section: admin
+#Architecture: all
+#Depends:
+# knot-resolver,
+# ${misc:Depends},
+#Provides:
+# knot-resolver-tools,
+#Enhances:
+# knot-resolver,
+#Description: additional tools for knot DNS resolver
+# This package contains additional tools for the knot DNS resolver.
diff --git a/debian/open-infrastructure-dehydrated-tools.config b/debian/open-infrastructure-dehydrated-tools.config
new file mode 100644
index 0000000..d2e8cd2
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.config
@@ -0,0 +1,60 @@
+#!/bin/sh
+
+set -e
+
+for FILE in /etc/dehydrated/config /etc/dehydrated/conf.d/*.sh
+do
+	if [ -e "${FILE}" ]
+	then
+		. ${FILE} || true
+	fi
+done
+
+. /usr/share/debconf/confmodule
+
+if [ -n "${CA}" ]
+then
+	db_set open-infrastructure-dehydrated-tools/ca "${CA}"
+fi
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/ca || true
+db_go
+
+if [ -n "${CHALLENGETYPE}" ]
+then
+	db_set open-infrastructure-dehydrated-tools/challengetype "${CHALLENGETYPE}"
+fi
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/challengetype || true
+db_go
+
+if [ -n "${CONTACT_EMAIL}" ]
+then
+	db_set open-infrastructure-dehydrated-tools/contact-email "${CONTACT_EMAIL}"
+fi
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/contact-email || true
+db_go
+
+if [ -e /usr/share/dehydrated/hooks ]
+then
+	HOOKS_CHOICES="$(cd /usr/share/dehydrated/hooks && find -maxdepth 1 -not -type d -printf '%P\n' | sort)"
+	db_subst open-infrastructure-dehydrated-tools/hooks HOOKS_CHOICES "$(echo ${HOOKS_CHOICES} | sed -e 's| |, |g')"
+
+	db_settitle open-infrastructure-dehydrated-tools/title
+	db_input low open-infrastructure-dehydrated-tools/hooks || true
+	db_go
+fi
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/basedir || true
+db_go
+
+db_settitle open-infrastructure-dehydrated-tools/title
+db_input low open-infrastructure-dehydrated-tools/register || true
+db_go
+
+db_stop
diff --git a/debian/open-infrastructure-dehydrated-tools.postinst b/debian/open-infrastructure-dehydrated-tools.postinst
new file mode 100755
index 0000000..116223f
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.postinst
@@ -0,0 +1,160 @@
+#!/bin/sh
+
+set -e
+
+Config ()
+{
+	FILE="${1}"
+	KEY="${2}"
+	VALUE="${3}"
+
+	TMPFILE="$(mktemp --dry-run ${FILE}.XXXX)"
+
+	if [ ! -e "${FILE}" ]
+	then
+
+cat > "${FILE}" << EOF
+# ${FILE}
+
+${KEY}="${VALUE}"
+EOF
+
+	fi
+
+	cp -a -f "${FILE}" "${TMPFILE}"
+
+	test -z "${VALUE}" || \
+		grep -Eq "^ *$(echo ${KEY})=" "${FILE}" || \
+		echo "${KEY}=" >> "$FILE}"
+
+	sed -e "s|^ *\($(echo ${KEY})\)=.*|\1=\"${VALUE}\"|" \
+	< "${FILE}" > "${TMPFILE}"
+
+	mv -f "${TMPFILE}" "${FILE}"
+}
+
+Install ()
+{
+	DEFAULT="${1}"
+	TARGET="${2}"
+
+	mkdir -p "${DEFAULT}"
+	mkdir -p "${TARGET}"
+
+	if [ "${TARGET}" != "${DEFAULT}" ]
+	then
+		if [ -h "${DEFAULT}" ]
+		then
+			rm -f "${DEFAULT}"
+			ln -s "${TARGET}" "${DEFAULT}"
+		else
+			if [ -e "${DEFAULT}" ] && [ -z "$(ls -A ${DEFAULT})" ]
+			then
+				rmdir "${DEFAULT}"
+				ln -s "${TARGET}" "${DEFAULT}"
+			fi
+		fi
+	fi
+
+	if ! dpkg-statoverride --list "${DEFAULT}" > /dev/null 2>&1 &&
+	   ! dpkg-statoverride --list "${TARGET}" > /dev/null 2>&1
+	then
+		if getent group ssl-cert > /dev/null 2>&1
+		then
+			GROUP="ssl-cert"
+		else
+			GROUP="root"
+		fi
+
+		chmod 0770 "${TARGET}"
+		chown root:"${GROUP}" "${TARGET}"
+
+		chmod 0770 "${DEFAULT}"
+		chown root:"${GROUP}" "${DEFAULT}"
+	fi
+}
+
+case "${1}" in
+	configure)
+		. /usr/share/debconf/confmodule
+
+		db_get open-infrastructure-dehydrated-tools/ca
+		CA="${RET}" # select
+
+		db_get open-infrastructure-dehydrated-tools/challengetype
+		CHALLENGETYPE="${RET}" # select
+
+		db_get open-infrastructure-dehydrated-tools/contact-email
+		CONTACT_EMAIL="${RET}" # string (w/ empty)
+
+		db_get open-infrastructure-dehydrated-tools/hooks
+		HOOKS="${RET}" # multi-select (w/ empty)
+
+		db_get open-infrastructure-dehydrated-tools/basedir
+		NEW_BASEDIR="${RET}" # string (w/o empty)
+
+		db_get open-infrastructure-dehydrated-tools/register
+		REGISTER="${RET}" # boolean
+
+		db_stop
+
+		Config /etc/dehydrated/conf.d/ca.sh CA ${CA}
+		Config /etc/dehydrated/conf.d/challenge.sh CHALLENGETYPE ${CHALLENGETYPE}
+		Config /etc/dehydrated/conf.d/contact.sh CONTACT_EMAIL ${CONTACT_EMAIL}
+
+		for HOOK in $(cd /usr/share/dehydrated/hooks && find -maxdepth 1 -not -type d -printf '%P\n' | sort)
+		do
+			if [ -L "/etc/dehydrated/hook.d/${HOOK}" ]
+			then
+				rm -f "/etc/dehydrated/hook.d/${HOOK}"
+			fi
+		done
+
+		if [ -n "${HOOKS}" ]
+		then
+			Config /etc/dehydrated/conf.d/hook.sh HOOK /usr/bin/dehydrated-hook.d
+
+			HOOKS="$(echo ${HOOKS} | sed -e 's|,| |g')"
+
+			for HOOK in ${HOOKS}
+			do
+				if [ ! -e "/etc/dehydrated/hook.d/${HOOK}" ]
+				then
+					ln -sf "/usr/share/dehydrated/hooks/${HOOK}" "/etc/dehydrated/hook.d/${HOOK}"
+				fi
+			done
+		fi
+
+		for FILE in /etc/dehydrated/config /etc/dehydrated/conf.d/*.sh
+		do
+			if [ -e "${FILE}" ]
+			then
+				. ${FILE} || true
+			fi
+		done
+
+		if [ -n "${NEW_BASEDIR}" ] && [ "${BASEDIR}" != "${NEW_BASEDIR}" ]
+		then
+			Install "${BASEDIR}" "${NEW_BASEDIR}"
+		fi
+
+		case "${REGISTER}" in
+			true)
+				dehydrated --register --accept-terms
+				;;
+		esac
+		;;
+
+	abort-upgrade|abort-remove|abort-deconfigure)
+
+		;;
+
+	*)
+		echo "postinst called with unknown argument \`${1}'" >&2
+		exit 1
+		;;
+esac
+
+#DEBHELPER#
+
+exit 0
diff --git a/debian/open-infrastructure-dehydrated-tools.templates b/debian/open-infrastructure-dehydrated-tools.templates
new file mode 100644
index 0000000..7f14cb9
--- /dev/null
+++ b/debian/open-infrastructure-dehydrated-tools.templates
@@ -0,0 +1,51 @@
+Template: open-infrastructure-dehydrated-tools/title
+Type: title
+Description: dehydrated-tools: Setup
+
+Template: open-infrastructure-dehydrated-tools/ca
+Type: select
+Choices: letsencrypt, letsencrypt-test, zerossl, buypass, buypass-test
+Default: letsencrypt
+Description: dehydrated Certificate Authority (CA):
+ Please select the Certificate Authority to use with dehydrated.
+ .
+ If unsure, use letsencrypt (default).
+
+Template: open-infrastructure-dehydrated-tools/challengetype
+Type: select
+Choices: dns-01, http-01
+Default: http-01
+Description: dehydrated Challenge Type:
+ Please select the challenge type to use with dehydrated.
+ .
+ If unsure, use http-01 (default).
+
+Template: open-infrastructure-dehydrated-tools/contact-email
+Type: string
+Default: 
+Description: dehydrated Contact Email:
+ Please select an optional contact email address for notifications of your CA.
+ .
+ If unsure, leave empty (default).
+
+Template: open-infrastructure-dehydrated-tools/hooks
+Type: multiselect
+Choices: ${HOOKS_CHOICES}
+Default: 
+Description: dehydrated hooks:
+ Please select any hooks that should be enabled for dehydrated.
+
+Template: open-infrastructure-dehydrated-tools/basedir
+Type: string
+Default: 
+Description: dehydrated base directory:
+ Please enter the base directory where all the certificates are stored.
+ .
+ If unsure, use /var/lib/dehydrated (default).
+
+Template: open-infrastructure-dehydrated-tools/register
+Type: boolean
+Default: false
+Description: dehydrated register:
+ Should a 'dehydrated --register --accept-terms' be executed now to create
+ an account for this system with your CA.
-- 
cgit v1.2.3