** Description changed: + [SRU Justification] On hosts with longer than 64-character FQDN's, + applications that require SSL-Cert will fail to configure. Since snake- + oil certs are invalid anyway, this change unblocks the installation of + packages that require the ssl-cert package. + [Impact]: Apache2 and any package that requires a Snake-Oil SSL cert will fail to install on when the FQDN is longer than 64-characters. [Development Fix]: Ubuntu Versions 11.04 through 12.10 share the same code base. For 12.10, the same fix was applied and uploaded. [Stable Fix]: The stable fix is the same as the development fix. The fix is very simplistic and merely uses the short hostname if the FQDN is too long. [Test Case]: Name a system with a FDQN longer than 64-characters; attempt to install Apache2, i.e. "apt-get -y install apache2". [Regresion Potential]: This regression potential is rather low. - - Apache2 reuqires the SSL-Cert package. On hosts where the host name is longer than 64-characters, then ssl-cert fails to configure and leaves Apache2 unconfigured. + Apache2 reuqires the SSL-Cert package. On hosts where the host name is + longer than 64-characters, then ssl-cert fails to configure and leaves + Apache2 unconfigured. ben@utlemming-22a:~$ hostname -f utlemming-22a.139cd93ba280479588e4157eac561a0b.utlemming-22a.525551751.uswest.internal.utlemmings-excellent-cloud.com ben@utlemming-22a:~$ sudo make-ssl-cert generate-default-snakeoil Could not create certificate. Openssl output was: Generating a 2048 bit RSA private key .......................+++ .................................................+++ writing new private key to '/etc/ssl/private/ssl-cert-snakeoil.key' ----- problems making Certificate Request 139776384734880:error:0D07A097:asn1 encoding routines:ASN1_mbstring_ncopy:string too long:a_mbstr.c:154:maxsize=64 ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: ssl-cert 1.0.28 ProcVersionSignature: Ubuntu 3.2.0-24.38-generic 3.2.16 Uname: Linux 3.2.0-24-generic x86_64 NonfreeKernelModules: nvidia ApportVersion: 2.0.1-0ubuntu7 Architecture: amd64 Date: Fri May 25 14:01:45 2012 EcryptfsInUse: Yes InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Beta amd64+mac (20120327.1) PackageArchitecture: all SourcePackage: ssl-cert UpgradeStatus: No upgrade log present (probably fresh install)
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1004682 Title: [SRU] apache2/ssl-cert fails to install on long-named hosts To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ssl-cert/+bug/1004682/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
