Andreas, this bug report would have much more helpful if it had included an explanation that the piuparts version used to generate the provided log was a patched version that is not available in the debian archives. It took me a little bit to figure this out.
Since I don't have the version of piuparts used to report the bug, I am unable to recreate the error, nor test that the removal of the directory deletes satisfies your patched version of piuparts. Quite the opposite. The latest piuparts (0.45) in archive reports success with the existing ca-certificates_20120623, and of course, reports an error when those rmdir lines are removed.. The diff and logs are attached. I'm tempted to set #316521 as a blocker to this bug. Andreas, if you would be so kind as to perhaps upload your patched version of piuparts to experimental or somewhere else, I might be able to do the needful. Or you could pull ca-certificates_20120721 from my repository and report back that it passes, perhaps? http://www.pbandjelly.org/debian/ca-certificates_20120721_all.deb -- Kind regards, Michael Shuler
diff --git a/debian/changelog b/debian/changelog
index 7736538..89d7d03 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,4 +1,4 @@
-ca-certificates (20120710) UNRELEASED; urgency=low
+ca-certificates (20120721) UNRELEASED; urgency=low
* Update mozilla/certdata.txt to version 1.85
Certificates added (+) (none removed):
@@ -8,8 +8,11 @@ ca-certificates (20120710) UNRELEASED; urgency=low
+ "StartCom Certification Authority G2"
+ "Buypass Class 2 Root CA"
+ "Buypass Class 3 Root CA"
+ * Correct piuparts package remove/purge behavior Closes: #682125
+ - Remove deletes of /etc/ssl{,/certs} from debian/postrm
+ - Add etc/ssl to debian/dirs
- -- Michael Shuler <[email protected]> Tue, 10 Jul 2012 14:05:27 -0500
+ -- Michael Shuler <[email protected]> Sat, 21 Jul 2012 09:54:25 -0500
ca-certificates (20120623) unstable; urgency=low
diff --git a/debian/dirs b/debian/dirs
index b64bbd3..840b840 100644
--- a/debian/dirs
+++ b/debian/dirs
@@ -1,3 +1,4 @@
+etc/ssl
etc/ssl/certs
usr/sbin
usr/share/ca-certificates/
diff --git a/debian/postrm b/debian/postrm
index 9b3c29c..11759fe 100644
--- a/debian/postrm
+++ b/debian/postrm
@@ -46,12 +46,6 @@ case "$1" in
purge)
rm -f /etc/ssl/certs/ca-certificates.crt
remove_dangling_symlinks
-
- # Clean up even if openssl is removed before ca-certificates.
- # (Which is what piuparts does.)
- [ -d /etc/ssl/certs ] && rmdir --ignore-fail-on-non-empty /etc/ssl/certs
- [ -d /etc/ssl ] && rmdir --ignore-fail-on-non-empty /etc/ssl
-
rm -f /etc/ca-certificates.conf*
;;
ca-certificates_20120623-piuparts_0.45.log.gz
Description: application/gzip
ca-certificates_20120721-piuparts_0.45.log.gz
Description: application/gzip
signature.asc
Description: OpenPGP digital signature
