dev-libs/openssl: Apply Flatcar modifications

- drop `pkg_postint`
- create `/etc/ssl` with tmpfiles

sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/files/openssl.conf

@@ -0,0 +1,3 @@
+d      /etc/ssl                -       -       -       -       -
+d      /etc/ssl/private        0700    -       -       -       -
+L      /etc/ssl/openssl.cnf    -       -       -       -       ../../usr/share/ssl/openssl.cnf

sdk_container/src/third_party/coreos-overlay/dev-libs/openssl/openssl-3.0.0.ebuild

@@ -3,7 +3,8 @@
 
 EAPI="7"
 
-inherit flag-o-matic linux-info toolchain-funcs multilib-minimal
+TMPFILES_OPTIONAL=1
+inherit flag-o-matic linux-info toolchain-funcs multilib-minimal systemd tmpfiles
 
 MY_P=${P/_/-}
 
@@ -248,9 +249,6 @@ multilib_src_install_all() {
 
 	dodoc {AUTHORS,CHANGES,NEWS,README,README-PROVIDERS}.md doc/*.txt doc/${PN}-c-indent.el
 
-	# create the certs directory
-	keepdir ${SSL_CNF_DIR}/certs
-
 	# Namespace openssl programs to prevent conflicts with other man pages
 	cd "${ED}"/usr/share/man || die
 	local m d s
@@ -282,12 +280,15 @@ multilib_src_install_all() {
 	dodir /etc/sandbox.d #254521
 	echo 'SANDBOX_PREDICT="/dev/crypto"' > "${ED}"/etc/sandbox.d/10openssl
 
-	diropts -m0700
+	# flatcar changes: do not keep the sample CA files in `/etc`
-	keepdir ${SSL_CNF_DIR}/private
+	rm -rf "${ED}"${SSL_CNF_DIR}
-}
 
-pkg_postinst() {
+	# flatcar changes: save the default `openssl.cnf` in `/usr`
-	ebegin "Running 'c_rehash ${EROOT}${SSL_CNF_DIR}/certs/' to rebuild hashes #333069"
+	dodir /usr/share/ssl
-	c_rehash "${EROOT}${SSL_CNF_DIR}/certs" >/dev/null
+	insinto /usr/share/ssl
-	eend $?
+	doins "${S}"/apps/openssl.cnf
+	dotmpfiles "${FILESDIR}"/openssl.conf
+
+	# flatcar changes: package `tmpfiles.d` setup for SDK bootstrapping.
+	systemd-tmpfiles --create --root="${ED}" "${FILESDIR}"/openssl.conf
 }