Hosting Provided By

Bug#465279: ssl-cert: /var/lib/dpkg/info/ssl-cert.postinst of version 1.0.15 hangs inside chroot

From: Michael Prokop <mika(at)grml.org>
Date: Mon Feb 11 2008 - 11:21:32 EST

Package: ssl-cert
Version: 1.0.15
Severity: important

Bootstrapping using a FAI based system the current ssl-cert version 1.0.15 hangs during installation:

% ps auxwww
[...]

root     17080  0.1  0.6  10620  8812 ttyp0    S+   16:05   0:00 /usr/bin/perl -w /usr/share/debconf/frontend /var/lib/dpkg/info/ssl-cert.postinst configure
root     17082  0.0  0.0   2724  1288 ttyp0    S+   16:05   0:00 /bin/sh -e /var/lib/dpkg/info/ssl-cert.postinst configure
root     17089  0.0  0.1   2740  1356 ttyp0    S+   16:05   0:00 /bin/bash -e /usr/sbin/make-ssl-cert generate-default-snakeoil
root     17093  0.0  0.1   3792  1452 ttyp0    S+   16:05   0:00 openssl req -config /tmp/tmp.ZkYAg17091 -new -x509 -days 3650 -nodes -out /etc/ssl/certs/ssl-cert-snakeoil.pem -keyout /etc/ssl/private/ssl-cert-snakeoil.key

[...]

Running the openssl command manually brings up:

17145:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 5

The content of /tmp/tmp.ZkYAg17091 is:

#
# SSLeay example configuration file.
#

RANDFILE                = $ENV::RANDFILE

[ req ]
default_bits            = 1024
default_keyfile         = privkey.pem
distinguished_name      = req_distinguished_name
prompt                  = no
policy                  = policy_anything

[ req_distinguished_name ]
commonName                      = randomname.grml.org

My chroot system (where ssl-cert can't be installed) is named "grml" using /etc/hostname (but /etc/init.d/hostname.sh doesn't seem to be executed), which is different from the outer system being randomname.grml.org (where I'm bootstrapping from and what seems to be the output of 'hostname -f'). Until now my setup always worked just fine. Am I doing something wrong and it worked fine until now just because of random luck or is the "hostname -f" change of ssl-cert causing unwanted problems? :)

Do you need help?

regards,
-mika-

-- 
To UNSUBSCRIBE, email to debian-apache-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

Received on Mon Feb 11 11:45:39 2008

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Wed Mar 19 2008 - 03:00:51 EDT