Index: trunk/packages/invirt-vnc-client/Makefile
===================================================================
--- trunk/packages/invirt-vnc-client/Makefile	(revision 1335)
+++ trunk/packages/invirt-vnc-client/Makefile	(revision 1336)
@@ -34,6 +34,4 @@
 	  VNCProxyConnectSocketWrapper.java SocketWrapper.java InvirtTrustManager.java
 
-EXTRAJAR = trust.store
-
 all: $(CLASSES) $(ARCHIVE)
 
@@ -42,5 +40,5 @@
 
 $(ARCHIVE): $(CLASSES) $(MANIFEST)
-	$(JAR) cfm $(ARCHIVE) $(MANIFEST) $(CLASSES) $(EXTRAJAR)
+	$(JAR) cfm $(ARCHIVE) $(MANIFEST) $(CLASSES)
 
 install: $(CLASSES) $(ARCHIVE)
Index: trunk/packages/invirt-vnc-client/debian/changelog
===================================================================
--- trunk/packages/invirt-vnc-client/debian/changelog	(revision 1335)
+++ trunk/packages/invirt-vnc-client/debian/changelog	(revision 1336)
@@ -3,6 +3,7 @@
   * sipb-xen-vnc-client -> invirt-vnc-client
   * SIPBTrustManager -> InvirtTrustManager
+  * Add a script to regenerate the client's certificate store
 
- -- Evan Broder <broder@mit.edu>  Sun, 26 Oct 2008 16:05:14 -0400
+ -- Evan Broder <broder@mit.edu>  Sun, 26 Oct 2008 17:14:15 -0400
 
 sipb-xen-vnc-client (1.03) unstable; urgency=low
Index: trunk/packages/invirt-vnc-client/debian/invirt-update-vnc-cert.sh
===================================================================
--- trunk/packages/invirt-vnc-client/debian/invirt-update-vnc-cert.sh	(revision 1336)
+++ trunk/packages/invirt-vnc-client/debian/invirt-update-vnc-cert.sh	(revision 1336)
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+if [ "$(ls /etc/invirt/vnc-cert.d)" == "" ]; then
+    echo "E: No certs in /etc/invirt/vnc-cert.d/" >&2
+    echo "   Put certificates for all Invirt VNC proxy servers in" >&2
+    echo "   /etc/invirt/vnc-cert.d, then run this script again" >&2
+    exit 1
+fi
+
+TMP_DIR="$(mktemp -d)"
+for i in $(ls /etc/invirt/vnc-cert.d/*.crt); do
+    keytool -noprompt -alias "${i%.crt}" -file "/etc/invirt/vnc-cert.d/$i" \
+        -keystore "$TMP_DIR/trust.store" -storepass "foobar"
+done
+
+jar uf /usr/share/invirt-vnc-client/VncViewer.jar -C "$TMP_DIR" trust.store
+
+rm -rf "$TMP_DIR"
Index: trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.dirs
===================================================================
--- trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.dirs	(revision 1335)
+++ trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.dirs	(revision 1336)
@@ -1,1 +1,2 @@
+etc/invirt/vnc-cert.d
 usr/share/invirt-vnc-client
Index: trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.install
===================================================================
--- trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.install	(revision 1336)
+++ trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.install	(revision 1336)
@@ -0,0 +1,1 @@
+debian/invirt-update-vnc-cert.sh usr/sbin/invirt-update-vnc-cert
Index: trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.postinst
===================================================================
--- trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.postinst	(revision 1336)
+++ trunk/packages/invirt-vnc-client/debian/invirt-vnc-client.postinst	(revision 1336)
@@ -0,0 +1,42 @@
+#!/bin/sh
+# postinst script for #PACKAGE#
+#
+# see: dh_installdeb(1)
+
+set -e
+
+# summary of how this script can be called:
+#        * <postinst> `configure' <most-recently-configured-version>
+#        * <old-postinst> `abort-upgrade' <new version>
+#        * <conflictor's-postinst> `abort-remove' `in-favour' <package>
+#          <new-version>
+#        * <postinst> `abort-remove'
+#        * <deconfigured's-postinst> `abort-deconfigure' `in-favour'
+#          <failed-install-package> <version> `removing'
+#          <conflicting-package> <version>
+# for details, see http://www.debian.org/doc/debian-policy/ or
+# the debian-policy package
+
+
+case "$1" in
+    configure)
+        invirt-update-vnc-cert || true
+    ;;
+
+    abort-upgrade|abort-remove|abort-deconfigure)
+    ;;
+
+    *)
+        echo "postinst called with unknown argument \`$1'" >&2
+        exit 1
+    ;;
+esac
+
+# dh_installdeb will replace this with shell code automatically
+# generated by other debhelper scripts.
+
+#DEBHELPER#
+
+exit 0
+
+