Bug#912277: apache2: does not start any more: AH01903: Failed to configure CA certificate chain!

2018-11-04 Thread Stefan Fritsch
On Sunday, 4 November 2018 18:36:19 CET Thorsten Glaser wrote: > This is a real WTF. I found https://serverfault.com/a/892300/189656 > and thought “hey, Apache 2 still documents SSLCertificateChainFile, > plus it’s the proper way to specify the chain given it’s normally > separate from the

Bug#912277: apache2: does not start any more: AH01903: Failed to configure CA certificate chain!

2018-11-04 Thread Thorsten Glaser
retitle 912277 apache2: SSLCertificateChainFile silently ignored, causing AH01903 startup failure thanks > 2.4.33-3+b1 is the oldest version I can downgrade to, and it > also exhibits the problem. WTF. This is a real WTF. I found https://serverfault.com/a/892300/189656 and thought “hey, Apache

Bug#912277: apache2: does not start any more: AH01903: Failed to configure CA certificate chain!

2018-11-04 Thread Thorsten Glaser
Dixi quod… > I just hit this on another machine, it’s the 2.4.35-1 → 2.4.37-1 upgrade > that caused the failure. Given that I originally reported this against 2.4.35-1 and that… > More debugging data points: this did not occur immediately after > the package upgrade, only when I did an

Bug#912277: apache2: does not start any more: AH01903: Failed to configure CA certificate chain!

2018-11-04 Thread Thorsten Glaser
Hi Stefan, > On Monday, 29 October 2018 20:31:54 CET Thorsten Glaser wrote: > > tglase@tglase:~ $ cat /var/log/apache2/error.log > > [Mon Oct 29 20:18:58.090841 2018] [ssl:emerg] [pid 17306] AH01903: Failed to > > configure CA certificate chain! > > [Mon Oct 29 20:18:58.090919 2018] [ssl:emerg]

apache2_2.4.25-3+deb9u6_amd64.changes ACCEPTED into proposed-updates->stable-new, proposed-updates

2018-11-04 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Sat, 03 Nov 2018 19:46:19 +0100 Source: apache2 Binary: apache2 apache2-data apache2-bin apache2-utils apache2-suexec-pristine apache2-suexec-custom apache2-doc apache2-dev apache2-ssl-dev apache2-dbg Architecture:

Bug#902906: marked as done (apache2-bin: mod_proxy_fcgi segfault on ap_fcgi_encoded_env_len if an environment variable value is null)

2018-11-04 Thread Debian Bug Tracking System
Your message dated Sun, 04 Nov 2018 11:47:09 + with message-id and subject line Bug#902906: fixed in apache2 2.4.25-3+deb9u6 has caused the Debian Bug report #902906, regarding apache2-bin: mod_proxy_fcgi segfault on ap_fcgi_encoded_env_len if an environment variable value is null to be

Bug#909591: marked as done (apache2: CVE-2018-11763: mod_http2, DoS via continuous SETTINGS frames)

2018-11-04 Thread Debian Bug Tracking System
Your message dated Sun, 04 Nov 2018 11:47:09 + with message-id and subject line Bug#909591: fixed in apache2 2.4.25-3+deb9u6 has caused the Debian Bug report #909591, regarding apache2: CVE-2018-11763: mod_http2, DoS via continuous SETTINGS frames to be marked as done. This means that you