Bug#225487: apache-ssl: Postinstall fails with a "sed" error
Hi Douglas,
thanks for the information. I think that the fact that apache does
not start is related to the wrong certificate. Just to be sure 100% please
remove /etc/apache-ssl/apache.pem and try to reinstall apache-ssl with
your patch applied to make-ssl-cert. This should generate a new and clean
certificate and hopefully apache-ssl will start.
Thanks
fabio
On Wed, 31 Dec 2003, Douglas Maxwell wrote:
> Hi Fabio-
>
> This patch fixes the problem and allows me to generate the cert.
>
> doug@hades:~$ diff -ur make-ssl-cert.orig make-ssl-cert
> --- make-ssl-cert.orig 2003-12-31 12:51:49.000000000 -0500
> +++ make-ssl-cert 2003-12-31 12:52:18.000000000 -0500
> @@ -97,13 +97,13 @@
> Email="$RET"
> db_fset make-ssl-cert/email seen false
>
> -sed -e s,@CountryName@,"$CountryName", \
> - -e s,@StateName@,"$StateName", \
> - -e s,@LocalityName@,"$LocalityName", \
> - -e s,@OrganisationName@,"$OrganisationName", \
> - -e s,@OUName@,"$OUName", \
> - -e s,@HostName@,"$HostName", \
> - -e s,@Email@,"$Email", \
> +sed -e s/@CountryName@/"$CountryName"/ \
> + -e s/@StateName@/"$StateName"/ \
> + -e s/@LocalityName@/"$LocalityName"/ \
> + -e s/@OrganisationName@/"$OrganisationName"/ \
> + -e s/@OUName@/"$OUName"/ \
> + -e s/@HostName@/"$HostName"/ \
> + -e s/@Email@/"$Email"/ \
> $template > /tmp/$$.req
>
> export RANDFILE=/dev/random
>
> ...but I now get an error regarding the cert request:
>
> hades:/etc/apache-ssl# apt-get -f install
> Reading Package Lists... Done
> Building Dependency Tree... Done
> 0 upgraded, 0 newly installed, 0 to remove and 7 not upgraded.
> 1 not fully installed or removed.
> Need to get 0B of archives.
> After unpacking 0B of additional disk space will be used.
> Setting up apache-ssl (1.3.29.0.1-3) ...
> + make_selfsigned_cert
> + '[' '!' -f /etc/apache-ssl/apache.pem ']'
> + /usr/sbin/make-ssl-cert /usr/share/ssl-cert/ssleay.cnf
> /etc/apache-ssl/apache.pem
> Generating a 1024 bit RSA private key
> .................................++++++
> ...++++++
> writing new private key to '/etc/apache-ssl/apache.pem'
> -----
> problems making Certificate Request
> 5332:error:0D07A098:asn1 encoding routines:ASN1_mbstring_copy:string too
> short:a_mbstr.c:147:minsize=1
> dpkg: error processing apache-ssl (--configure):
> subprocess post-installation script returned error exit status 1
> Errors were encountered while processing:
> apache-ssl
> E: Sub-process /usr/bin/dpkg returned an error code (1)
>
> ...and when I run 'apt-get -f install' again:
>
> Starting web server: apache-sslProcessing config directory:
> /etc/apache-ssl/conf.d
> failed
> invoke-rc.d: initscript apache-ssl, action "start" failed.
> dpkg: error processing apache-ssl (--configure):
> subprocess post-installation script returned error exit status 1
> Errors were encountered while processing:
> apache-ssl
> E: Sub-process /usr/bin/dpkg returned an error code (1)
> hades:/etc/apache-ssl#
>
> I attached the output with 'set -x' in the postinstall script, as it was
> rather large - this is with the above patch applied.
>
> Regards,
>
> Doug
>
>
--
Our mission: make IPv6 the default IP protocol
"We are on a mission from God" - Elwood Blues
http://www.itojun.org/paper/itojun-nanog-200210-ipv6isp/mgp00004.html
Reply to: