#!/bin/sh

set -e

# Ensure system group is created by sysusers.d before statoverride runs

#DEBHELPER#

. /usr/share/debconf/confmodule

# no need to perform any check. If the certificates are there
# it will exit 0.
make-ssl-cert generate-default-snakeoil

# allow group ssl-cert to access /etc/ssl/private
if ! dpkg-statoverride --list /etc/ssl/private >/dev/null 2>&1
then
    dpkg-statoverride --update --add root ssl-cert 710 /etc/ssl/private
fi
