mellon_create_metadata fails silently to create xml file

Bug #2052795 reported by RainerT
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ssl-cert (Ubuntu)
New
Undecided
Unassigned

Bug Description

The script mellon_create_metadata fails to create the xml file without warning:

# mellon_create_metadata https://example.net/saml/metadata https://example.net/saml
Output files:
Private key: https_example.net_saml_metadata.key
Certificate: https_example.net_saml_metadata.cert
Metadata: https_example.net_saml_metadata.xml

Host: example.net

Endpoints:
SingleLogoutService: https://example.net/saml/logout
AssertionConsumerService: https://example.net/saml/postResponse

# ls -la
insgesamt 16
drwxr-xr-x 2 root root 4096 Feb 9 12:17 .
drwx------ 10 root root 4096 Feb 9 12:17 ..
-rw------- 1 root root 1359 Feb 9 12:15 https_example.net_saml_metadata.cert
-rw------- 1 root root 2484 Feb 9 12:15 https_example.net_saml_metadata.key

# lsb_release -rd
Description: Ubuntu 22.04.3 LTS

# apt-cache policy libapache2-mod-auth-mellon
libapache2-mod-auth-mellon:
  Installiert: 0.18.0-1build1
  Installationskandidat: 0.18.0-1build1
  Versionstabelle:
 *** 0.18.0-1build1 500
        500 http://de.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
        100 /var/lib/dpkg/status

3)
It should create the file https_example.net_saml_metadata.xml

4) fails to create without warning

It fails because it uses openssl with /dev/urandom and tries to write to it. The script is
"set -e" and openssl writes error.out to /dev/null.
If openssl writes his error to stdout you see:

Cannot write random bytes:
4047B000347F0000:error:1200007A:random number generator:RAND_write_file:Not a regular file:../crypto/rand/randfile.c:190:Filename=/dev/urandom

It is the same problem as this bug:
https://bugs.launchpad.net/ubuntu/+source/ssl-cert/+bug/1945774

RainerT (tr-ml)
description: updated
tags: added: sts
tags: removed: sts
Revision history for this message
Paride Legovini (paride) wrote :

This looks like a duplicate of LP: #1945774 (as also noted in the bug description), I'm marking it as such. That bug has open (New) Jammy tasks.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.