This is not a bug in ssl-cert.  It's a bug in libapache2-mod-auth-
mellon, more specifically in the way it configures openssl to generate
its certificate.  From /usr/sbin/mellon_create_metadata:

cat >"$TEMPLATEFILE" <<EOF
RANDFILE           = /dev/urandom
[req]
default_bits       = 3072
default_keyfile    = privkey.pem
distinguished_name = req_distinguished_name
prompt             = no
policy             = policy_anything
[req_distinguished_name]
commonName         = $HOST
EOF

The fix is simple: just remove the RANDFILE entry from the snippet
above.  This looks like SRU material, so I'm adding a task for the
package and setting its status accordingly.

** Also affects: libapache2-mod-auth-mellon (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: libapache2-mod-auth-mellon (Ubuntu Jammy)
       Status: New => Triaged

** Changed in: ssl-cert (Ubuntu Jammy)
       Status: Confirmed => Fix Released

** Changed in: hplip (Ubuntu Jammy)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1945774

Title:
  openssl: breaks ssl-cert installation:
  8022CB35777F0000:error:1200007A:random number
  generator:RAND_write_file:Not a regular
  file:../crypto/rand/randfile.c:190:Filename=/dev/urandom

To manage notifications about this bug go to:
https://bugs.launchpad.net/mod-auth-mellon/+bug/1945774/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to