Package: wwwoffle Version: 2.9d-3 Severity: critical X-debbugs-Cc: wwwoffle-us...@gedanken.demon.co.uk,a...@gedanken.demon.co.uk
Dear Debian WWWOFFLE maintainer: when wwwoffle's certificate expires, http://mid.gmane.org/87fxhha9j2....@jidanni.org http://mid.gmane.org/fcaeb9bf0903111614t787a2cd5k362ff3878e2f5...@mail.gmail.com booting waits for it to be rebuilt, which may take forever, i.e., cannot boot, depending on ones system, especially at boot time when there is little entropy. The notice "The WWWOFFLE root CA files don't exist. Please stand by while these are generated (this may take very long, depending on your system)." only is seen in the logs, not on the screen. Nor are there progress indicators. Even on gigahertz systems, minutes go by with the user staring at frozen boot messages, which may be underneath a splashscreen, e.g., on a cellphone, where half an hour will go by with no sign of whenever one might be able to finish booting. I repeat, there is not enough entropy at boot. You effectively lock users out of the whole system with this ticking time bomb. Workaround: Reboot (CTRL-ALT-DEL) into single user mode. update-rc.d -f wwwoffle remove or boot from emergency Knoppix etc. CD and rm /etc/rc?.d/S20wwwoffle and reboot. Later after boot, when it will no longer make the whole system wait, and there is more entropy, one may try removing the empty /etc/wwwoffle/certificates/root/root-key.pem and rebuilding it using /etc/init.d/wwwoffle start. If after many minutes this never completes, consider copying it from a machine that has one...? Then # update-rc.d wwwoffle default Another consideration is how to install wwwoffle on smaller devices in the first place. One can only copy the certificate by hand from another machine. Anyway, in the http://news.gmane.org/gmane.network.wwwoffle.user there is mention about redesigns, as apparently this time bomb has gone off at about the same time for several people... -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
