- force ca-certificates refresh for 1.0.0 openssl

- http://lists.pld-linux.org/mailman/pipermail/pld-devel-pl/2010-May/151486.html
- rel 5

Changed files:
    openssl.spec -> 1.222

diff --git a/openssl.spec b/openssl.spec
index 39e4a6a8106006f653cfca9717b4c48b58707f1a..d7ff7977a1b024f5986d3234ac9feeda39f9bd99 100644 (file)
--- a/openssl.spec
+++ b/openssl.spec
@@ -17,7 +17,7 @@ Summary(ru.UTF-8):    Библиотеки и утилиты для соедине
 Summary(uk.UTF-8):     Бібліотеки та утиліти для з'єднань через Secure Sockets Layer
 Name:          openssl
 Version:       1.0.0
-Release:       4
+Release:       5
 License:       Apache-like
 Group:         Libraries
 Source0:       ftp://ftp.openssl.org/source/%{name}-%{version}.tar.gz
@@ -325,6 +325,10 @@ rm -rf $RPM_BUILD_ROOT
 %post   -p /sbin/ldconfig
 %postun -p /sbin/ldconfig
 
+%triggerpostun -- %{name}-tools < 1.0.0-5
+# the hashing format has changed in 1.0.0
+[ ! -x %{_sbindir}/update-ca-certificates ] || %{_sbindir}/update-ca-certificates --fresh || :
+
 %if "%{pld_release}" == "ti"
 %triggerin -- %{name}-tools < 0.9.8i-2
 if [ -L /var/lib/openssl/openssl.cnf ] ; then