Hi Martin,

Martin Bartosch wrote:

- SuSE packaging fix for Bug 981919 has a minor error:
  * keyword 'batch' is missing for INSTALL_STUFF in %install section,
    should read:
    INSTALL_STUFF="ca common ldap pub ra scep node batch doc"

Fixed.

- SuSE packaging:
  nCipher module is missing from the perl-openca-crypto RPM for
  some reason. Have not investigated the reason for this, spec
  file seems to be fine.

Fixed. This was a bug in openca-crypto.spec. The file Token/nCipher.pm was missing in the files section.


- I am getting an error during startup for the LDAP module, even if
  the module is disabled in the server configuration:

---***---
Can't call method "configError" on an undefined value at
/usr/local/openca-0.9.2
/lib/servers/ca/functions/initLDAP line 18.
Compilation failed in require at
/usr/local/openca-0.9.2/lib/servers/ca/function
s/initServer line 95.
Compilation failed in require at ./openca_start line 62
---***---

  The reason for this is that $ui_html is not defined in initLDAP.
  As a workaround (I don't need LDAP currently) I modified initLDAP
  to be only executed if $ui_html is defined.
  The system then works fine...

We always init LDAP. This was a past RC5 change. I see no reason why this initialization should crash. I fixed the $ui_html issue in initServer. Now $ui_html is defined and you should get some output. Nevertheless we use $ui_html->configError no longer directly. The errormessage was improved too.


- newly created XML log ownership is set too root:root under
  var/log/xml/time/... for newly created directories. Browser
  shows a permission denied when calling (e. g.) the CA interface.
  Manual chown wwwrun:nobody fixes this temporarily. Have not
  investigated the source for this problem, may be a local oddity.

This is interesting and related to a big Perl problem. If we change the UID and/or GID of a Perl process then we are not able to verify this change because the typical POSIX calls don't work reliable under Perl :(


So if there is a problem during the startup of the XML chache then we have nearly no chance to detect this problem.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - digital self defense, top technical experts, no vendor pitches, unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to