[SRU] apache2/ssl-cert fails to install on long-named hosts
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| ssl-cert (Debian) |
Fix Released
|
Unknown
|
|||
| ssl-cert (Ubuntu) |
Fix Released
|
Low
|
Unassigned | ||
| Precise |
Fix Released
|
Medium
|
Unassigned | ||
| Quantal |
Fix Released
|
Low
|
Unassigned | ||
Bug Description
[SRU Justification] On hosts with longer than 64-character FQDN's, applications that require SSL-Cert will fail to configure. Since snake-oil certs are invalid anyway, this change unblocks the installation of packages that require the ssl-cert package.
[Impact]: Apache2 and any package that requires a Snake-Oil SSL cert will fail to install on when the FQDN is longer than 64-characters.
[Development Fix]: Ubuntu Versions 11.04 through 12.10 share the same code base. For 12.10, the same fix was applied and uploaded.
[Stable Fix]: The stable fix is the same as the development fix. The fix is very simplistic and merely uses the short hostname if the FQDN is too long.
[Test Case]: Name a system with a FDQN longer than 64-characters; attempt to install Apache2, i.e. "apt-get -y install apache2".
[Regresion Potential]: This regression potential is rather low.
Apache2 reuqires the SSL-Cert package. On hosts where the host name is longer than 64-characters, then ssl-cert fails to configure and leaves Apache2 unconfigured.
ben@utlemming-
utlemming-
ben@utlemming-
Could not create certificate. Openssl output was:
Generating a 2048 bit RSA private key
.......
.......
writing new private key to '/etc/ssl/
-----
problems making Certificate Request
139776384734880
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ssl-cert 1.0.28
ProcVersionSign
Uname: Linux 3.2.0-24-generic x86_64
NonfreeKernelMo
ApportVersion: 2.0.1-0ubuntu7
Architecture: amd64
Date: Fri May 25 14:01:45 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64+mac (20120327.1)
PackageArchitec
SourcePackage: ssl-cert
UpgradeStatus: No upgrade log present (probably fresh install)
| Ben Howard (darkmuggle-deactivatedaccount) wrote | #1 |
| Changed in ssl-cert (Ubuntu): | |
| milestone: | none → quantal-alpha-1 |
| Changed in ssl-cert (Ubuntu): | |
| assignee: | nobody → Ben Howard (utlemming) |
| Changed in ssl-cert (Ubuntu Precise): | |
| status: | New → Confirmed |
| importance: | Undecided → Low |
| assignee: | nobody → Ben Howard (utlemming) |
| Launchpad Janitor (janitor) wrote | #2 |
| Changed in ssl-cert (Ubuntu Quantal): | |
| status: | Confirmed → Fix Released |
| Changed in ssl-cert (Debian): | |
| status: | Unknown → New |
| Changed in ssl-cert (Ubuntu Precise): | |
| importance: | Low → Medium |
| description: | updated |
| summary: |
- apache2/ssl-cert fails to install on long-named hosts + [SRU] apache2/ssl-cert fails to install on long-named hosts |
| James Page (james-page) wrote | #3 |
| description: | updated |
| Colin Watson (cjwatson) wrote Please test proposed package | #4 |
| Changed in ssl-cert (Ubuntu Precise): | |
| status: | Confirmed → Fix Committed |
| tags: | added: verification-needed |
| Ben Howard (darkmuggle-deactivatedaccount) wrote | #5 |
| tags: |
added: verification-done removed: verification-needed |
| Launchpad Janitor (janitor) wrote | #6 |
| Changed in ssl-cert (Ubuntu Precise): | |
| status: | Fix Committed → Fix Released |
| Changed in ssl-cert (Debian): | |
| status: | New → Fix Released |
This bug was fixed in the package ssl-cert - 1.0.28ubuntu1
---------------
ssl-cert (1.0.28ubuntu1) quantal; urgency=low
[ Ben Howard ]
* If fully qualified domain name is longer than 64 characters, use the
short hostname. (LP: #1004682)
-- Scott Moser <email address hidden> Fri, 25 May 2012 16:50:13 -0400