Invalid certificate generated by Vault causes apache2 service to fail
Bug Description
Charm: cs:vault-9
Problem statement: After endpoint unit (ex: openstack-
Part of cert chain that causes apache2 to fail:
4jxDjOfUx5b0Ugm
Ay4gY9knZspq2dx
Ow==
-----END CERTIFICATE-
MIID3zCCAsegAwI
VQQGEwJOTDETMBE
MREwDwYDVQQKDAh
If line break between END and BEGIN blocks is added manually - Apache service is coming back online.
ubuntu@
● apache2.service - The Apache HTTP Server
Loaded: loaded (/lib/systemd/
Drop-In: /lib/systemd/
Active: failed (Result: exit-code) since Wed 2019-01-30 16:35:08 UTC; 3h 25min ago
Main PID: 1631200 (code=exited, status=1/FAILURE)
Jan 30 16:33:55 juju-da7df6-6-lxd-8 systemd[1]: Reloading The Apache HTTP Server.
Jan 30 16:33:55 juju-da7df6-6-lxd-8 systemd[1]: Reloaded The Apache HTTP Server.
Jan 30 16:34:08 juju-da7df6-6-lxd-8 systemd[1]: Reloading The Apache HTTP Server.
Jan 30 16:34:08 juju-da7df6-6-lxd-8 systemd[1]: Reloaded The Apache HTTP Server.
Jan 30 16:34:33 juju-da7df6-6-lxd-8 systemd[1]: Reloading The Apache HTTP Server.
Jan 30 16:34:33 juju-da7df6-6-lxd-8 systemd[1]: Reloaded The Apache HTTP Server.
Jan 30 16:35:08 juju-da7df6-6-lxd-8 systemd[1]: Reloading The Apache HTTP Server.
Jan 30 16:35:08 juju-da7df6-6-lxd-8 systemd[1]: Reloaded The Apache HTTP Server.
Jan 30 16:35:08 juju-da7df6-6-lxd-8 systemd[1]: apache2.service: Main process exited, code=exited, status=1/FAILURE
Jan 30 16:35:08 juju-da7df6-6-lxd-8 systemd[1]: apache2.service: Failed with result 'exit-code'.
$ tail -n10 /var/log/
[Wed Jan 30 16:34:08.211127 2019] [mpm_event:notice] [pid 1631200:tid 140067706403776] AH00489: Apache/2.4.29 (Ubuntu) OpenSSL/1.1.0g mod_wsgi/4.5.17 Python/2.7 configured -- resuming normal operations
[Wed Jan 30 16:34:08.211165 2019] [core:notice] [pid 1631200:tid 140067706403776] AH00094: Command line: '/usr/sbin/apache2'
[Wed Jan 30 16:34:33.812752 2019] [mpm_event:notice] [pid 1631200:tid 140067706403776] AH00493: SIGUSR1 received. Doing graceful restart
[Wed Jan 30 16:34:33.877196 2019] [mpm_event:notice] [pid 1631200:tid 140067706403776] AH00489: Apache/2.4.29 (Ubuntu) OpenSSL/1.1.0g mod_wsgi/4.5.17 Python/2.7 configured -- resuming normal operations
[Wed Jan 30 16:34:33.877234 2019] [core:notice] [pid 1631200:tid 140067706403776] AH00094: Command line: '/usr/sbin/apache2'
[Wed Jan 30 16:35:08.489187 2019] [mpm_event:notice] [pid 1631200:tid 140067706403776] AH00493: SIGUSR1 received. Doing graceful restart
[Wed Jan 30 16:35:08.551041 2019] [ssl:emerg] [pid 1631200:tid 140067706403776] AH02562: Failed to configure certificate juju-da7df6-
[Wed Jan 30 16:35:08.551080 2019] [ssl:emerg] [pid 1631200:tid 140067706403776] SSL Library Error: error:0906D066:PEM routines:
[Wed Jan 30 16:35:08.551106 2019] [ssl:emerg] [pid 1631200:tid 140067706403776] SSL Library Error: error:140DC009:SSL routines:
[Wed Jan 30 16:35:08.551125 2019] [:emerg] [pid 1631200:tid 140067706403776] AH00020: Configuration Failed, exiting
[1] https:/
[2] https:/
Changed in charm-cinder: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-glance: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-heat: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-neutron-api: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-nova-cloud-controller: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-rabbitmq-server: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-swift-proxy: | |
status: | New → Fix Committed |
importance: | Undecided → High |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-aodh: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Fix Committed |
Changed in charm-barbican: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Fix Committed |
Changed in charm-designate: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Fix Committed |
Changed in charm-gnocchi: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Confirmed |
Changed in charm-manila: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Fix Committed |
Changed in charm-nova-cell-controller: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Fix Committed |
Changed in charm-octavia: | |
assignee: | nobody → Frode Nordahl (fnordahl) |
importance: | Undecided → High |
status: | New → Fix Committed |
Changed in charm-keystone: | |
importance: | Undecided → High |
status: | New → Fix Released |
assignee: | nobody → Frode Nordahl (fnordahl) |
Changed in charm-gnocchi: | |
status: | Confirmed → In Progress |
Changed in charm-barbican: | |
status: | Fix Committed → Fix Released |
Changed in charm-manila: | |
status: | Fix Committed → Fix Released |
Changed in charm-nova-cell-controller: | |
status: | Fix Committed → Fix Released |
Changed in charm-octavia: | |
status: | Fix Committed → Fix Released |
Changed in charm-cinder: | |
status: | Fix Committed → Fix Released |
Changed in charm-glance: | |
status: | Fix Committed → Fix Released |
Changed in charm-heat: | |
status: | Fix Committed → Fix Released |
Changed in charm-neutron-api: | |
status: | Fix Committed → Fix Released |
Changed in charm-nova-cloud-controller: | |
status: | Fix Committed → Fix Released |
Changed in charm-openstack-dashboard: | |
status: | Fix Committed → Fix Released |
Changed in charm-swift-proxy: | |
status: | Fix Committed → Fix Released |
Changed in charm-rabbitmq-server: | |
status: | Fix Committed → Fix Released |
Changed in charm-gnocchi: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Committed → Triaged |
Changed in charm-aodh: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Committed → Triaged |
Changed in charm-barbican: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Released → Triaged |
Changed in charm-designate: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Committed → Triaged |
Changed in charm-manila: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Released → Triaged |
Changed in charm-nova-cell-controller: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Released → Triaged |
Changed in charm-octavia: | |
assignee: | Frode Nordahl (fnordahl) → David Ames (thedac) |
status: | Fix Released → Triaged |
Changed in charm-aodh: | |
milestone: | none → 19.04 |
Changed in charm-barbican: | |
milestone: | none → 19.04 |
Changed in charm-designate: | |
milestone: | none → 19.04 |
Changed in charm-gnocchi: | |
milestone: | none → 19.04 |
Changed in charm-manila: | |
milestone: | none → 19.04 |
Changed in charm-octavia: | |
milestone: | none → 19.04 |
Changed in charm-aodh: | |
status: | Fix Committed → Fix Released |
Changed in charm-barbican: | |
status: | Fix Committed → Fix Released |
Changed in charm-designate: | |
status: | Fix Committed → Fix Released |
Changed in charm-gnocchi: | |
status: | Fix Committed → Fix Released |
Changed in charm-manila: | |
status: | Fix Committed → Fix Released |
Changed in charm-octavia: | |
status: | Fix Committed → Fix Released |
Changed in charm-nova-cell-controller: | |
milestone: | none → 19.07 |
Changed in charm-nova-cell-controller: | |
status: | Fix Committed → Fix Released |
Subscribed ~field-high as this may impact ongoing customer delivery and handover.