https://bz.apache.org/bugzilla/show_bug.cgi?id=70300
Bug ID: 70300
Summary: Internal error (specific information not available)
obtaining certificate
Product: Apache httpd-2
Version: 2.4.69
Hardware: All
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mod_md
Assignee: [email protected]
Reporter: [email protected]
Target Milestone: ---
mod_md reports:
Internal error (specific information not available): ... asked to retrieve
chain, but no order in context
[md:error] ... Internal error (specific information not available): AH10056:
processing ...: Unable to retrieve rsa certificate chain.
With md:trace4 (and only with trace on), we see:
md_curl.c(199): req[2]: info error adding trust anchors from file:
/etc/pki/tls/certs/ca-bundle.crt
In this case, the cause is a Fedora upgrade that relocated this file.
However, md_curl.c should report the error at a high enough severity to make
troubleshooting easier. Inability to load the ca bundle is more serious than
'info' to mod_md. The current ("specific information not available") is not
very helpful to a system administrator.
The error seems to be reported as CURLINFO_TEXT to curl_debug_log.
Note that in this case the filename is defaulting somewhere in curl/openssl -
'ca-bundle.crt" does not appear in the server configuration files (or
/server-info output).
On Fedora 44, this particular issue is fixed by:
ln -s ../../ca-trust/extracted/pem/tls-ca-bundle.pem
/etc/pki/tls/certs/ca-bundle.crt
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
