[rpms/openssl] rebase_40beta: - make CA dir readable - the private keys are in private subdir (#584810)

A new commit has been pushed.

Repo   : rpms/openssl
Branch : rebase_40beta
Commit : 290d51ec7feb22d65bf89b3b65c2705e99f72e09
Author : Tomáš Mráz <tmraz@fedoraproject.org>
Date   : 2010-05-18T15:34:17+00:00
Stats  : +10/-1 in 1 file(s)
URL    : https://src.fedoraproject.org/rpms/openssl/c/290d51ec7feb22d65bf89b3b65c2705e99f72e09?branch=rebase_40beta

Log:
- make CA dir readable - the private keys are in private subdir (#584810)

---
diff --git a/openssl.spec b/openssl.spec
index bae51c1..b011d46 100644
--- a/openssl.spec
+++ b/openssl.spec
@@ -295,8 +295,11 @@ pushd  $RPM_BUILD_ROOT%{_sysconfdir}/pki/tls/misc
 mv CA.sh CA
 popd
 
-mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA
+mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA
 mkdir -m700 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/private
+mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/certs
+mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/crl
+mkdir -m755 $RPM_BUILD_ROOT%{_sysconfdir}/pki/CA/newcerts
 
 # Ensure the openssl.cnf timestamp is identical across builds to avoid
 # mulitlib conflicts and unnecessary renames on upgrade
@@ -359,6 +362,9 @@ rm -rf $RPM_BUILD_ROOT/%{_libdir}/fipscanister.*
 %{_sysconfdir}/pki/tls/misc/CA
 %dir %{_sysconfdir}/pki/CA
 %dir %{_sysconfdir}/pki/CA/private
+%dir %{_sysconfdir}/pki/CA/certs
+%dir %{_sysconfdir}/pki/CA/crl
+%dir %{_sysconfdir}/pki/CA/newcerts
 %{_sysconfdir}/pki/tls/misc/c_*
 %{_sysconfdir}/pki/tls/private
 
@@ -399,6 +405,9 @@ rm -rf $RPM_BUILD_ROOT/%{_libdir}/fipscanister.*
 %postun -p /sbin/ldconfig
 
 %changelog
+* Tue May 18 2010 Tomas Mraz <tmraz@redhat.com> 1.0.0-4
+- make CA dir readable - the private keys are in private subdir (#584810)
+
 * Fri Apr  9 2010 Tomas Mraz <tmraz@redhat.com> 1.0.0-3
 - a few fixes from upstream CVS
 - move libcrypto to /lib (#559953)