| 2012-05-25 20:06:05 |
Ben Howard |
bug |
|
|
added bug |
| 2012-05-25 20:20:17 |
Ben Howard |
ssl-cert (Ubuntu): milestone |
|
quantal-alpha-1 |
|
| 2012-05-25 20:20:54 |
Ben Howard |
nominated for series |
|
Ubuntu Precise |
|
| 2012-05-25 20:20:54 |
Ben Howard |
nominated for series |
|
Ubuntu Quantal |
|
| 2012-05-25 20:34:10 |
Ben Howard |
ssl-cert (Ubuntu): assignee |
|
Ben Howard (utlemming) |
|
| 2012-05-25 20:35:18 |
Ben Howard |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=674598 |
|
| 2012-05-25 20:35:18 |
Ben Howard |
bug task added |
|
ssl-cert (Debian) |
|
| 2012-05-25 20:52:52 |
Scott Moser |
bug task added |
|
ssl-cert (Ubuntu Precise) |
|
| 2012-05-25 20:53:00 |
Scott Moser |
bug task added |
|
ssl-cert (Ubuntu Quantal) |
|
| 2012-05-25 20:53:08 |
Scott Moser |
ssl-cert (Ubuntu Precise): status |
New |
Confirmed |
|
| 2012-05-25 20:53:10 |
Scott Moser |
ssl-cert (Ubuntu Precise): importance |
Undecided |
Low |
|
| 2012-05-25 20:53:18 |
Scott Moser |
ssl-cert (Ubuntu Precise): assignee |
|
Ben Howard (utlemming) |
|
| 2012-05-25 20:55:16 |
Launchpad Janitor |
ssl-cert (Ubuntu Quantal): status |
Confirmed |
Fix Released |
|
| 2012-05-25 21:24:11 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/ssl-cert |
|
| 2012-05-25 21:25:15 |
Bug Watch Updater |
ssl-cert (Debian): status |
Unknown |
New |
|
| 2012-05-28 14:42:08 |
Ben Howard |
ssl-cert (Ubuntu Precise): importance |
Low |
Medium |
|
| 2012-05-28 14:47:48 |
Ben Howard |
description |
Apache2 reuqires the SSL-Cert package. On hosts where the host name is longer than 64-characters, then ssl-cert fails to configure and leaves Apache2 unconfigured.
ben@utlemming-22a:~$ hostname -f
utlemming-22a.139cd93ba280479588e4157eac561a0b.utlemming-22a.525551751.uswest.internal.utlemmings-excellent-cloud.com
ben@utlemming-22a:~$ sudo make-ssl-cert generate-default-snakeoil
Could not create certificate. Openssl output was:
Generating a 2048 bit RSA private key
.......................+++
.................................................+++
writing new private key to '/etc/ssl/private/ssl-cert-snakeoil.key'
-----
problems making Certificate Request
139776384734880:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=64
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ssl-cert 1.0.28
ProcVersionSignature: Ubuntu 3.2.0-24.38-generic 3.2.16
Uname: Linux 3.2.0-24-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu7
Architecture: amd64
Date: Fri May 25 14:01:45 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64+mac (20120327.1)
PackageArchitecture: all
SourcePackage: ssl-cert
UpgradeStatus: No upgrade log present (probably fresh install) |
[Impact]: Apache2 and any package that requires a Snake-Oil SSL cert will fail to install on when the FQDN is longer than 64-characters.
[Development Fix]: Ubuntu Versions 11.04 through 12.10 share the same code base. For 12.10, the same fix was applied and uploaded.
[Stable Fix]: The stable fix is the same as the development fix. The fix is very simplistic and merely uses the short hostname if the FQDN is too long.
[Test Case]: Name a system with a FDQN longer than 64-characters; attempt to install Apache2, i.e. "apt-get -y install apache2".
[Regresion Potential]: This regression potential is rather low.
Apache2 reuqires the SSL-Cert package. On hosts where the host name is longer than 64-characters, then ssl-cert fails to configure and leaves Apache2 unconfigured.
ben@utlemming-22a:~$ hostname -f
utlemming-22a.139cd93ba280479588e4157eac561a0b.utlemming-22a.525551751.uswest.internal.utlemmings-excellent-cloud.com
ben@utlemming-22a:~$ sudo make-ssl-cert generate-default-snakeoil
Could not create certificate. Openssl output was:
Generating a 2048 bit RSA private key
.......................+++
.................................................+++
writing new private key to '/etc/ssl/private/ssl-cert-snakeoil.key'
-----
problems making Certificate Request
139776384734880:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=64
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ssl-cert 1.0.28
ProcVersionSignature: Ubuntu 3.2.0-24.38-generic 3.2.16
Uname: Linux 3.2.0-24-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu7
Architecture: amd64
Date: Fri May 25 14:01:45 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64+mac (20120327.1)
PackageArchitecture: all
SourcePackage: ssl-cert
UpgradeStatus: No upgrade log present (probably fresh install) |
|
| 2012-05-28 14:54:25 |
James Page |
summary |
apache2/ssl-cert fails to install on long-named hosts |
[SRU] apache2/ssl-cert fails to install on long-named hosts |
|
| 2012-05-28 15:32:29 |
Ben Howard |
description |
[Impact]: Apache2 and any package that requires a Snake-Oil SSL cert will fail to install on when the FQDN is longer than 64-characters.
[Development Fix]: Ubuntu Versions 11.04 through 12.10 share the same code base. For 12.10, the same fix was applied and uploaded.
[Stable Fix]: The stable fix is the same as the development fix. The fix is very simplistic and merely uses the short hostname if the FQDN is too long.
[Test Case]: Name a system with a FDQN longer than 64-characters; attempt to install Apache2, i.e. "apt-get -y install apache2".
[Regresion Potential]: This regression potential is rather low.
Apache2 reuqires the SSL-Cert package. On hosts where the host name is longer than 64-characters, then ssl-cert fails to configure and leaves Apache2 unconfigured.
ben@utlemming-22a:~$ hostname -f
utlemming-22a.139cd93ba280479588e4157eac561a0b.utlemming-22a.525551751.uswest.internal.utlemmings-excellent-cloud.com
ben@utlemming-22a:~$ sudo make-ssl-cert generate-default-snakeoil
Could not create certificate. Openssl output was:
Generating a 2048 bit RSA private key
.......................+++
.................................................+++
writing new private key to '/etc/ssl/private/ssl-cert-snakeoil.key'
-----
problems making Certificate Request
139776384734880:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=64
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ssl-cert 1.0.28
ProcVersionSignature: Ubuntu 3.2.0-24.38-generic 3.2.16
Uname: Linux 3.2.0-24-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu7
Architecture: amd64
Date: Fri May 25 14:01:45 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64+mac (20120327.1)
PackageArchitecture: all
SourcePackage: ssl-cert
UpgradeStatus: No upgrade log present (probably fresh install) |
[SRU Justification] On hosts with longer than 64-character FQDN's, applications that require SSL-Cert will fail to configure. Since snake-oil certs are invalid anyway, this change unblocks the installation of packages that require the ssl-cert package.
[Impact]: Apache2 and any package that requires a Snake-Oil SSL cert will fail to install on when the FQDN is longer than 64-characters.
[Development Fix]: Ubuntu Versions 11.04 through 12.10 share the same code base. For 12.10, the same fix was applied and uploaded.
[Stable Fix]: The stable fix is the same as the development fix. The fix is very simplistic and merely uses the short hostname if the FQDN is too long.
[Test Case]: Name a system with a FDQN longer than 64-characters; attempt to install Apache2, i.e. "apt-get -y install apache2".
[Regresion Potential]: This regression potential is rather low.
Apache2 reuqires the SSL-Cert package. On hosts where the host name is longer than 64-characters, then ssl-cert fails to configure and leaves Apache2 unconfigured.
ben@utlemming-22a:~$ hostname -f
utlemming-22a.139cd93ba280479588e4157eac561a0b.utlemming-22a.525551751.uswest.internal.utlemmings-excellent-cloud.com
ben@utlemming-22a:~$ sudo make-ssl-cert generate-default-snakeoil
Could not create certificate. Openssl output was:
Generating a 2048 bit RSA private key
.......................+++
.................................................+++
writing new private key to '/etc/ssl/private/ssl-cert-snakeoil.key'
-----
problems making Certificate Request
139776384734880:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=64
ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ssl-cert 1.0.28
ProcVersionSignature: Ubuntu 3.2.0-24.38-generic 3.2.16
Uname: Linux 3.2.0-24-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.0.1-0ubuntu7
Architecture: amd64
Date: Fri May 25 14:01:45 2012
EcryptfsInUse: Yes
InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64+mac (20120327.1)
PackageArchitecture: all
SourcePackage: ssl-cert
UpgradeStatus: No upgrade log present (probably fresh install) |
|
| 2012-05-28 15:32:35 |
Ben Howard |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2012-05-28 15:40:40 |
Colin Watson |
ssl-cert (Ubuntu Precise): status |
Confirmed |
Fix Committed |
|
| 2012-05-28 15:40:44 |
Colin Watson |
bug |
|
|
added subscriber SRU Verification |
| 2012-05-28 15:40:50 |
Colin Watson |
tags |
amd64 apport-bug precise |
amd64 apport-bug precise verification-needed |
|
| 2012-05-28 16:17:17 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/precise-proposed/ssl-cert |
|
| 2012-05-29 20:22:00 |
Ben Howard |
tags |
amd64 apport-bug precise verification-needed |
amd64 apport-bug precise verification-done |
|
| 2012-06-04 23:31:10 |
Launchpad Janitor |
ssl-cert (Ubuntu Precise): status |
Fix Committed |
Fix Released |
|
| 2012-06-10 14:09:47 |
Bug Watch Updater |
ssl-cert (Debian): status |
New |
Fix Released |
|
