Your message dated Sun, 25 Jan 2004 15:18:51 +0100 (CET)
with message-id <[EMAIL PROTECTED]>
and subject line Bug#229505: apache-ssl: post-installation script fails
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 18 Jan 2004 11:53:43 +0000
>From [EMAIL PROTECTED] Sun Jan 18 05:53:42 2004
Return-path: <[EMAIL PROTECTED]>
Received: from pd9561fbf.dip.t-dialin.net ([127.0.0.1]) [217.86.31.191]
by master.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1AiBUs-0004kS-00; Sun, 18 Jan 2004 05:53:42 -0600
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Michael Kebe <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: apache-ssl: post-installation script fails
X-Mailer: reportbug 2.37
Date: Sun, 18 Jan 2004 12:53:33 +0100
X-Debbugs-Cc: [EMAIL PROTECTED]
Message-Id: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_01_24
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=HAS_PACKAGE,OUR_MTA_MSGID,
X_DEBBUGS_CC autolearn=no version=2.60-bugs.debian.org_2004_01_24
X-Spam-Level:
Package: apache-ssl
Version: 1.3.29.0.1-3
Severity: normal
After apt-get install apache-ssl I get:
> Setting up apache-ssl (1.3.29.0.1-3) ...
> Starting web server: apache-sslProcessing config directory:
> /etc/apache-ssl/conf.d
> failed
> invoke-rc.d: initscript apache-ssl, action "start" failed.
> dpkg: error processing apache-ssl (--configure):
> subprocess post-installation script returned error exit status 1
> Errors were encountered while processing:
> apache-ssl
> E: Sub-process /usr/bin/dpkg returned an error code (1)
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux missmuh 2.4.20 #8 Tue Jun 3 23:51:20 CEST 2003 i686
Locale: LANG=C, [EMAIL PROTECTED]
---------------------------------------
Received: (at 229505-done) by bugs.debian.org; 25 Jan 2004 14:18:54 +0000
>From [EMAIL PROTECTED] Sun Jan 25 06:18:54 2004
Return-path: <[EMAIL PROTECTED]>
Received: from port5.ds1-sby.adsl.cybercity.dk (trider-g7.fabbione.net)
[212.242.169.198]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1Akl6E-0007nq-00; Sun, 25 Jan 2004 06:18:54 -0800
Received: from trider-g7.ext.fabbione.net (port5.ds1-sby.adsl.cybercity.dk
[212.242.169.198])
by trider-g7.fabbione.net (Postfix) with ESMTP id 7E2542E;
Sun, 25 Jan 2004 15:18:51 +0100 (CET)
Date: Sun, 25 Jan 2004 15:18:51 +0100 (CET)
From: Fabio Massimo Di Nitto <[EMAIL PROTECTED]>
Sender: [EMAIL PROTECTED]
To: Michael Kebe <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: Bug#229505: apache-ssl: post-installation script fails
In-Reply-To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
References: <[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
<[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_01_24
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-3.0 required=4.0 tests=HAS_BUG_NUMBER autolearn=no
version=2.60-bugs.debian.org_2004_01_24
X-Spam-Level:
Hi Michael,
this was a bug in ssl-cert that has been fixed in sid already and
it should enter testing in a couple of days.
Fabio
On Sun, 25 Jan 2004, Michael Kebe wrote:
> Fabio Massimo Di Nitto wrote:
> > Hi,
> > are you running testing? is this a fresh installation or an
> > upgrade?
>
> Yes, I am running testing. I think it was a fresh install, because I
> purge the previous installation...
>
> > Please provide me more information asap.
>
> I found the problem by myself:
>
> If you left one field in the dialog for the certificate empty you will get:
>
> > Setting up apache-ssl (1.3.29.0.1-3) ...
> > Generating a 1024 bit RSA private key
> > ...................++++++
> > .......++++++
> > writing new private key to '/etc/apache-ssl/apache.pem'
> > -----
> > problems making Certificate Request
> > 32587:error:0D07A098:asn1 encoding routines:ASN1_mbstring_copy:string too
> > short:a_mbstr.c:147:minsize=1
> > dpkg: error processing apache-ssl (--configure):
> > subprocess post-installation script returned error exit status 1
> > Errors were encountered while processing:
> > apache-ssl
> > E: Sub-process /usr/bin/dpkg returned an error code (1)
>
> And if you then try again "apt-get install apache-ssl" you will get (the
> message of my first report):
>
> > Setting up apache-ssl (1.3.29.0.1-3) ...
> > Starting web server: apache-sslProcessing config directory:
> > /etc/apache-ssl/conf.d
> > failed
> > invoke-rc.d: initscript apache-ssl, action "start" failed.
> > dpkg: error processing apache-ssl (--configure):
> > subprocess post-installation script returned error exit status 1
> > Errors were encountered while processing:
> > apache-ssl
> > E: Sub-process /usr/bin/dpkg returned an error code (1)
>
>
> So if left a field empty in the dialog for the creation of a certificate
> a corrupted "apache.pem" will be created:
>
> > ---- /var/log/apache-ssl/error.log ----
> > [Sun Jan 25 14:16:40 2004] [crit] Error reading server certificate file
> > /etc/apache-ssl/apache.pem
> > [Sun Jan 25 14:16:40 2004] [crit] error:0906D06C:PEM
> > routines:PEM_read_bio:no start line
> > -------------- 8< ---------------------
>
> and then on the second "apt-get install apache-ssl" the postinstall
> script just checks if there is a /etc/apache-ssl/apache.pem, and yes
> there is one, but one that is *corrupted*. So it will try to start
> apache-ssl, but it won't (see error.log)
>
> So maybe its a good thing to say in the dialog to fill out *every* field
> or to check if the apache.pem is correct and working.
>
> Greetings
> Michael
>
--
Our mission: make IPv6 the default IP protocol
"We are on a mission from God" - Elwood Blues
http://www.itojun.org/paper/itojun-nanog-200210-ipv6isp/mgp00004.html
