apache2 image element requires ssl-certs on ubuntu

Bug #1284242 reported by Tom Hancock
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
tripleo
Won't Fix
High
Unassigned

Bug Description

From os-collect-config log file on an image booted from devtest:

'make-ssl-cert: command not found'

$ dpkg -S /usr/sbin/make-ssl-cert
ssl-cert: /usr/sbin/make-ssl-cert

[2014-02-24 17:47:49,629] (os-refresh-config) [INFO] Starting phase post-configure
dib-run-parts Mon Feb 24 17:47:49 UTC 2014 Running /opt/stack/os-config-refresh/post-configure.d/15-apache2
+ '[' -f /etc/debian_version ']'
+ openssl_cmd=openssl
+ cert_create_cmd='make-ssl-cert generate-default-snakeoil --force-overwrite'
+ snakeoil_pem_file=/etc/ssl/certs/ssl-cert-snakeoil.pem
+ '[' -f /etc/ssl/certs/ssl-cert-snakeoil.pem ']'
+ cert_chk_cmd='openssl x509 -noout -in /etc/ssl/certs/ssl-cert-snakeoil.pem'
+ exit_error=0
++ openssl x509 -noout -in /etc/ssl/certs/ssl-cert-snakeoil.pem
unable to load certificate
3073526024:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:703:Expecting: TRUSTED CERTIFICATE
+ cmd_run=
+ exit_error=1
+ '[' 1 -ne 0 ']'
+ exit_error=0
++ make-ssl-cert generate-default-snakeoil --force-overwrite
/opt/stack/os-config-refresh/post-configure.d/15-apache2: line 16: make-ssl-cert: command not found
+ cmd_run=
+ exit_error=1
+ '[' 1 -eq 0 ']'
+ '[' 1 -ne 0 ']'
+ echo 'Error encountered setting up SSL (exit_error=1)'
Error encountered setting up SSL (exit_error=1)
+ '[' -f /etc/debian_version ']'
+ service apache2 reload
 * Reloading web server apache2 ^[[80G ^[[31m*^[[39;49m
 ^[[33m*^[[39;49m Apache2 is not running

Tags: security ssl
Revision history for this message
Robert Collins (lifeless) wrote :

Actually, I'd argue the bug is that we're trying to make snakeoil certificates. We should pass in the certificate needed to the machines that need it, as snakeoil is never the right production answer. Tests can make snakeoil certs on the jenkins slave.

Changed in tripleo:
status: New → Triaged
importance: Undecided → High
tags: added: security ssl
Revision history for this message
Ben Nemec (bnemec) wrote :

I don't think this is relevant anymore.

Changed in tripleo:
status: Triaged → Won't Fix
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.