[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
It fails in an automatic upgrade/installation environment because the PATH variables are different than if you're using a shell. /usr/sbin is not included if a cron runs the upgrade (or installation) - therefor the command make-ssl-cert fails to create the files (because the file is not executed) and then the chmod and chgrp fail because there is no file to modify and exit with code 1. you could either change the PATH envorinment variable for cron OR adapt the script so it doesn't fail (should have absolute paths anyway!!!) it's two times in the postinstallation script [line 32 and line 40] if the path gets changed to an absolute one, everything works as expected (i tested this) line 32 old: make-ssl-cert generate-default-snakeoil --force-overwrite line 32 new: /usr/sbin/make-ssl-cert generate-default-snakeoil --force-overwrite line 40 old: make-ssl-cert generate-default-snakeoil line 40 new: /usr/sbin/make-ssl-cert generate-default-snakeoil thats it ...! could be closed pretty easy and fast also affects feisty version 1.0.13 -- same problem! i haven't looked at the intrepid version of the postinst script, but i suspect the problem could be there too - worth a look ;) -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
Per discussion with james_w on IRC, it's a reasonable expectation for shells invoking dpkg to have /sbin and /usr/sbin in their path (for example, openssl will fail to install in the preconfiguration stage if the path does not include /sbin and /usr/sbin). Marking this as invalid. Please re-open if it turns out to not be a PATH related issue. Thanks! ** Changed in: ssl-cert (Ubuntu Intrepid) Status: Triaged = Invalid ** Changed in: ssl-cert (Ubuntu Intrepid) Status: Invalid = Won't Fix ** Changed in: ssl-cert (Ubuntu) Status: Invalid = Triaged -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
well ... i am sorry - it seems i have made an error here. I don't know exactly what i did wrong but i retested everything and fixing the path is not enough. the real problem is the ssleay.cnf that is being used to generate the standard pem file it sets the RANDFILE variable to $ENV::HOME/.rnd if the script is used via cron or anyother script that is being started automatically the user may still be root, but the homedir is not set (i don't think that THIS is an error) and the creation of the file fails. If executed in a shell it works. changing the RANDFILE to /tmp/.rnd does the trick. i don't see the point why this file needs to be in the homedir of the user that installs the package or uses make- ssl-cert. isn't /tmp good enough? [this needs reopening] -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
Hi, /tmp is a really bad idea and a security hole, if the name .rnd is used at least. I think having it shared between users would perhaps be a security hole as well. Having it use a proper tmpfile may be possible, but it may still be at risk. I'm not sure the file is required though, so it may be possible to not fail if the file can't be created, I'm not sure. Thanks, James -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
well you can try ... if used in an environment where there is no homedir set it does fail - no certificate is created or updated. ** Changed in: ssl-cert (Ubuntu Intrepid) Status: Won't Fix = New -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
this has an effect on all packages (eg. lighttpd) that use a ssleay.cnf and may create or update certificates upon installation/upgrade -- make-ssl-cert fails if HOME is unset or empty https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
Perhaps something like this somewhere in make-ssl-cert:
if [ ! -d $HOME ]; then
temphome=$(mktemp -d)
cleanup () {
rm -rf $temphome
}
trap cleanup EXIT HUP INT QUIT TERM
export HOME=$temphome
fi
** Summary changed:
- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
+ make-ssl-cert fails if HOME is unset or empty
** Changed in: ssl-cert (Ubuntu Intrepid)
Status: New = Triaged
--
make-ssl-cert fails if HOME is unset or empty
https://bugs.launchpad.net/bugs/250400
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
** This bug has been marked a duplicate of bug 250399 package update-manager 1:0.87.27 failed to install/upgrade: ErrorMessage: SystemError in cache.commit(): E:Sub-process /usr/bin/dpkg returned an error code (1), E:Sub-process /usr/bin/dpkg returned an error code (1) ** This bug is no longer a duplicate of bug 250399 package update-manager 1:0.87.27 failed to install/upgrade: ErrorMessage: SystemError in cache.commit(): E:Sub-process /usr/bin/dpkg returned an error code (1), E:Sub-process /usr/bin/dpkg returned an error code (1) ** Changed in: ssl-cert (Ubuntu) Importance: Undecided = High Status: Confirmed = Triaged -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
That's because ssl-cert 1.0.14-0ubuntu2.1 fails to install: Richte ssl-cert ein (1.0.14-0ubuntu2.1) ... dpkg: Fehler beim Bearbeiten von ssl-cert (--configure): Unterprozess post-installation script gab den Fehlerwert 1 zurück ** Changed in: ssl-cert (Ubuntu) Status: New = Confirmed -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 250400] Re: package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade:
** Attachment added: Dependencies.txt http://launchpadlibrarian.net/16207486/Dependencies.txt ** Attachment added: VarLogDistupgradeAptlog.gz http://launchpadlibrarian.net/16207487/VarLogDistupgradeAptlog.gz ** Attachment added: VarLogDistupgradeApttermlog.gz http://launchpadlibrarian.net/16207488/VarLogDistupgradeApttermlog.gz ** Attachment added: VarLogDistupgradeMainlog.gz http://launchpadlibrarian.net/16207489/VarLogDistupgradeMainlog.gz ** Attachment added: VarLogDistupgradeTermlog.gz http://launchpadlibrarian.net/16207490/VarLogDistupgradeTermlog.gz -- package ssl-cert 1.0.14-0ubuntu2.1 failed to install/upgrade: https://bugs.launchpad.net/bugs/250400 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
