Your message dated Mon, 23 Oct 2017 15:21:03 +0000
with message-id <e1e6exh-000bb9...@fasolo.debian.org>
and subject line Bug#877341: fixed in libapache2-mod-md 1.0.1-1
has caused the Debian Bug report #877341,
regarding libapache2-mod-md: Doesn't work yet: "AH02572: Failed to configure at 
least one certificate and key" (require a patched version of apache2)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
877341: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=877341
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libapache2-mod-md
Version: 0.9.0-1
Severity: grave

Dear Ondřej,

I've installed libapache2-mod-md on a machine (Raspberry Pi) running
Debian Unstable where apache2 was already installed.

I've disabled all previous site configurations and wrote a new site
configuration from scratch and only enabled that site:

---8<---
ServerAdmin a...@deuxchevaux.org
ServerName ….deuxchevaux.org
ManagedDomain ….deuxchevaux.org

# Requires libapache2-mod-md ≥ 0.9.4
#MDRequireHttps temporary

DocumentRoot /var/www/html

ErrorLog ${APACHE_LOG_DIR}/error.log
CustomLog ${APACHE_LOG_DIR}/access.log combined

<VirtualHost *:80>
    Protocols h2 h2c http/1.1
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost *:443>
    Protocols h2 http/1.1

    SSLEngine on
</VirtualHost>
</IfModule>
--->8---

"apache2ctl configtest" said that everything is fine: "Syntax OK".

Upon "service apache2 restart" I though got the following lines in the
error.log:

---8<---
[Sat Sep 30 18:39:45.407137 2017] [ssl:emerg] [pid 4976:tid 1995292672] 
AH02572: Failed to configure at least one certificate and key for 
….deuxchevaux.org:443 
[Sat Sep 30 18:39:45.407356 2017] [ssl:emerg] [pid 4976:tid 1995292672] SSL 
Library Error: error:02001002:system library:fopen:No such file or directory 
(fopen('/etc/apache2/md/domains/….deuxchevaux.org/privkey.pem','r')) 
[Sat Sep 30 18:39:45.407449 2017] [ssl:emerg] [pid 4976:tid 1995292672] SSL 
Library Error: error:2006D080:BIO routines:BIO_new_file:no such file 
[Sat Sep 30 18:39:45.407621 2017] [ssl:emerg] [pid 4976:tid 1995292672] SSL 
Library Error: error:140A80B1:SSL routines:SSL_CTX_check_private_key:no 
certificate assigned 
[Sat Sep 30 18:39:45.407675 2017] [ssl:emerg] [pid 4976:tid 1995292672] 
AH02312: Fatal error initialising mod_ssl, exiting. 
AH00016: Configuration Failed 
--->8---

According to https://github.com/icing/mod_md/wiki/2.4.x-Installation,
this module needs either Apache 2.5/2.6 (not yet in Debian) or a patched
Apache 2.4, otherwise I'd get the AH02572 error message and an SSL
Library Error. Which I got, see above.

So I checked apache2's changelog.Debian.gz for inclusion of such a patch
but found none. I also checked https://bugs.debian.org/src:apache2 for
an according request to include such a patch, but haven't found any
either.

So I assume that libapache2-mod-md is currently not usable at all with
plain Debian unstable.

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'unstable-debug'), (500, 
'buildd-unstable'), (500, 'stable'), (1, 'experimental-debug'), (1, 
'buildd-experimental'), (1, 'experimental')
Architecture: armhf (armv7l)

Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C:en 
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages libapache2-mod-md depends on:
ii  apache2-bin [apache2-api-20120211]  2.4.27-6
ii  libapr1                             1.6.2-1
ii  libaprutil1                         1.6.0-2
ii  libc6                               2.24-17
ii  libcurl3-gnutls                     7.55.1-1
ii  libjansson4                         2.10-1
ii  libssl1.1                           1.1.0f-5

libapache2-mod-md recommends no packages.

libapache2-mod-md suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: libapache2-mod-md
Source-Version: 1.0.1-1

We believe that the bug you reported is fixed in the latest version of
libapache2-mod-md, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 877...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Surý <ond...@debian.org> (supplier of updated libapache2-mod-md package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 23 Oct 2017 15:02:30 +0000
Source: libapache2-mod-md
Binary: libapache2-mod-md
Architecture: source
Version: 1.0.1-1
Distribution: unstable
Urgency: medium
Maintainer: Ondřej Surý <ond...@debian.org>
Changed-By: Ondřej Surý <ond...@debian.org>
Description:
 libapache2-mod-md - ACME certificate support for apache2
Closes: 877341
Changes:
 libapache2-mod-md (1.0.1-1) unstable; urgency=medium
 .
   * New upstream version 1.0.1
   * Add dependency on apache2-bin with mod_ssl_md patch in (Closes: #877341)
Checksums-Sha1:
 8e5db4679493791d161c6493c643e0d02fb620c9 2145 libapache2-mod-md_1.0.1-1.dsc
 208910d3a19ade9df5b594dfd824b6ddddfdf2c3 545936 
libapache2-mod-md_1.0.1.orig.tar.gz
 2e8d815d05bbc4d208717ae94724e2f3cdb703a4 1812 
libapache2-mod-md_1.0.1-1.debian.tar.xz
 6192cd3436f89d2b74dcca9ded2a64155f30f2b1 7040 
libapache2-mod-md_1.0.1-1_amd64.buildinfo
Checksums-Sha256:
 7125790056c6922fbeab260a751c57dc0d168394d3a4a6f5fd2ed4f41a05c58a 2145 
libapache2-mod-md_1.0.1-1.dsc
 225d85213a9c9b65d40dfdf993e976d3cf4931fe249ecc3e6531a05918cc380c 545936 
libapache2-mod-md_1.0.1.orig.tar.gz
 f3b6d8c225f8d22a96abe83960d0e1d04c2aaa7de7d78ed788b103c4b7bd9e1f 1812 
libapache2-mod-md_1.0.1-1.debian.tar.xz
 45dd0da3c385b335a9bdd2ef616b42caf2236b672d61264d11cd8ccab0ee0789 7040 
libapache2-mod-md_1.0.1-1_amd64.buildinfo
Files:
 b0ce8f81fa61290ed7992b593c26e9e1 2145 httpd optional 
libapache2-mod-md_1.0.1-1.dsc
 6cf6ed54b9aef6f72c44bddbb4b09eb1 545936 httpd optional 
libapache2-mod-md_1.0.1.orig.tar.gz
 1f513a0227f54667b7f38e210b94bbd7 1812 httpd optional 
libapache2-mod-md_1.0.1-1.debian.tar.xz
 cdeafb41138c37eab1efb9fac42d1d50 7040 httpd optional 
libapache2-mod-md_1.0.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ptSb
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to