I recalled seeing this commit in the log - this bit of code was added to please piuparts (see bug #454334), and piuparts is still angry? :)
----------
(master)mshuler@mana:~/repos/git/ca-certificates$ git log -1
dfbc841749d7e8d0036d6ac0d6966f4efb8cdaa7
commit dfbc841749d7e8d0036d6ac0d6966f4efb8cdaa7
Author: Philipp Kern <pk...@debian.org>
Date: Thu Nov 27 18:18:48 2008 +0100
Remove /etc/ssl{,/certs} in postrm to please piuparts. (Closes:
#454334)
piuparts purges openssl first, which leaves `/etc/ssl/certs' on the
system. There was already a workaround for #454334 in place, but this
only covered `/etc/ssl', which was not removable due to `/etc/ssl/certs'
still in place.
(master)mshuler@mana:~/repos/git/ca-certificates$ git diff
7776067d434b7813470c23207d0185ae056a70be
dfbc841749d7e8d0036d6ac0d6966f4efb8cdaa7
diff --git a/debian/postrm b/debian/postrm
index 260a1c4..e4feb3e 100644
--- a/debian/postrm
+++ b/debian/postrm
@@ -28,8 +28,12 @@ case "$1" in
purge)
rm -f /etc/ssl/certs/ca-certificates.crt*
- # Fix for #454334
- rmdir --ignore-fail-on-non-empty /etc/ssl
+
+ # Clean up even if openssl is removed before ca-certificates.
+ # (Which is what piuparts does.)
+ [ -d /etc/ssl/certs ] && rmdir --ignore-fail-on-non-empty
/etc/ssl/certs
+ [ -d /etc/ssl ] && rmdir --ignore-fail-on-non-empty /etc/ssl
+
rm -f /etc/ca-certificates.conf*
if test -e /usr/share/debconf/confmodule; then
. /usr/share/debconf/confmodule
(master)mshuler@mana:~/repos/git/ca-certificates$
----------
In looking at #316521, I can understand this might be the problem. I'll
test out what happens with no explicit rmdir's in postinst and let dpkg
deal with the contents of debian/dirs.
--
Kind regards,
Michael Shuler
signature.asc
Description: OpenPGP digital signature
