Emerge and SSL certs

cub · n00b Joined: 07 Dec 2004 Posts: 4

Hello, all!

I newbie in Gentoo and want to know how I can use emerge/qpkg and its friends with full power. So I have some questions.

How I can regenerate ssl certificate after installing some port (cyrus, apache etc) using standart tools like emegre?

And where have I to define variables used by /usr/portage/eclass/ssl-cert.eclass - in /etc/make.conf?

Thx.

adaptr · Posted: Tue Dec 07, 2004 11:58 am Post subject: Re: Emerge and SSL certs

cub · n00b Joined: 07 Dec 2004 Posts: 4

As I say, I'm newbie in Gentoo. But not in other *nix'es

So sorry, but your link not help me.

I can give example what I meant:

# USE="ssl" emerge cyrus-imapd

In such case, cyrus portage generate self-signed ssl certificates and place theirs in /etc/ssl/cyrus . I do some investigations and see than man file (as I think) is /usr/portage/eclass/ssl-cert.eclass. But I don't known Phyton and can't fully understand all dependecies in code.

Can anybody give me some explanation - how I can use emerge and others to regenerate ssl-cert's without full reinstalling cyrus portage (for ex.)? And where I shuld define SSL_* varts used by portage classes?

adaptr · Posted: Tue Dec 07, 2004 12:30 pm Post subject:

And again I correct you: you neither want nor need to concern yourself with eclasses or Python.
The SSL certificate programs are included with OpenSSL, as always.
Read the docs provided.

An eclass is not a "man"- whichever you mean by that vague statement.

If you want the ebuild to generate new SSL keys for you then read, learn and edit that.
_________________
>>> emerge (3 of 7) mcse/70-293 to /
Essential tools: gentoolkit eix profuse screen

cub · n00b Joined: 07 Dec 2004 Posts: 4

I'm sorry, in prev. message "main" should be instead of "man".

My english is very bad... and I can't explain everything I want...

Ok, I'll try to explain on an example.

In FreeBSD ports I can make something like the following:
cd /usr/ports/www/apache13-ssl
make install clean

... use apache...
... and when I want to re-generate certificates I can do....

cd /usr/ports/www/apache13-ssl
make certificate

Can I do same things in Gentoo - for ex. with cyrus-imapd? And in what way?

This is what I've done:
USE="ssl" emerge cyrus
and got installed cyrus, and portage system generates for me ssl-certificates. But when I want to re-generate their - what command should I use?

For now (as quick and dirty hack) I copied cyrus ebuild file into a file with other name, deleted unneded lines for it (all except about ssl) and tryed to install "new" ebuild. At last with some troubles - I've got whatl I wanted. But this way is very ugly, and I think that emerge can already have some functionality to do this. And my first question was exactly about this, but in more wide form.

adaptr · Posted: Tue Dec 07, 2004 2:34 pm Post subject:

Like I said: portage doesn't do this - not exactly.
Any post-installation information is in the ebuild file, which is executed by the ebuild program.
You can read this file, since it is a script for portage, and determine how the SSL certificates are created.

If you want a simple way to remerge stuff, do this: