Bug#231726: apache2-common: error may be caused by empty response to cert questions
Package: apache2-common
Version: 2.0.48-7
Severity: normal
Followup-For: Bug #231726
I just ran into what looks like the same problem, and I have a theory
of the cause: I left one of the certificate responses blank (I just
hit enter; it was the last organizational one, like my dept or
division).
I upgraded apache2 on another system and introduced the certificate
for the first time recently, and that one worked fine. There are many
differences between the systems, but this seems the most obvious
culprit. This system also has a still installed and running apache v
1, and I installed mpm-worker here rather than mpm-perhcild there. I
note the warning about an existing server running is something else I
have in common with the original problem report.
If this theory is correct, it seems to me the preferable solution is
to permit blanks (this machine is a family system; we don't have
departments!). A fallback might be to indicate earlier that some
content is required, or to otherwise deal with the problem more
gracefully.
Here's a bit of the install log
# apt-get -qt unstable install libapache2-svn apache2-doc
apache2-mpm-worker
Reading Package Lists...
Building Dependency Tree...
The following extra packages will be installed:
apache2-common ssl-cert
The following NEW packages will be installed:
apache2-common apache2-doc apache2-mpm-worker libapache2-svn
ssl-cert
0 upgraded, 5 newly installed, 0 to remove and 353 not upgraded.
# other stuff, including ncurses based certificate config
Setting up ssl-cert (1.0-7) ...
Setting up apache2-common (2.0.48-7) ...
Setting Apache2 not to start, as something else appears to be using
Port 80. To allow apache2 to start, set NO_START to 0 in
/etc/default/apache2. Apache2 has been set to listen on port 80 by
default, so please edit /etc/apache2/ports.conf as desired. Note that
the Port directive no longer works.
Generating a 1024 bit RSA private key
....................................++++++
.............................++++++
writing new private key to '/etc/apache2/ssl/apache.pem'
-----
problems making Certificate Request
20712:error:0D07A098:asn1 encoding routines:ASN1_mbstring_copy:string
too short:a_mbstr.c:147:minsize=1
dpkg: error processing apache2-common (--configure):
subprocess post-installation script returned error exit status 1
Setting up apache2-doc (2.0.48-7) ...
dpkg: dependency problems prevent configuration of apache2-mpm-worker:
apache2-mpm-worker depends on apache2-common (= 2.0.48-7); however:
Package apache2-common is not configured yet.
dpkg: error processing apache2-mpm-worker (--configure):
dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of libapache2-svn:
libapache2-svn depends on apache2; however:
Package apache2 is not installed.
Package apache2-mpm-worker which provides apache2 is not configured
yet.
dpkg: error processing libapache2-svn (--configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
apache2-common
apache2-mpm-worker
libapache2-svn
E: Sub-process /usr/bin/dpkg returned an error code (1)
Finally, I have the practical question of how to recover from this.
-- System Information:
Debian Release: testing/unstable
Architecture: i386
Kernel: Linux wheat 2.4.21advncdfs #1 Wed Sep 17 22:06:42 PDT 2003 i686
Locale: LANG=en_US, LC_CTYPE=en_US
Versions of packages apache2-common depends on:
ii debconf 1.3.22 Debian configuration management sy
ii debianutils 2.6.2 Miscellaneous utilities specific t
ii libapr0 2.0.48-7 The Apache Portable Runtime
ii libc6 2.3.2.ds1-11 GNU C Library: Shared libraries an
ii libdb4.2 4.2.52-8 Berkeley v4.2 Database Libraries [
ii libexpat1 1.95.6-6 XML parsing C library - runtime li
ii libldap2 2.1.23-1 OpenLDAP libraries
ii libssl0.9.7 0.9.7c-5 SSL shared libraries
ii mime-support 3.24-1 MIME files 'mime.types' & 'mailcap
ii net-tools 1.60-9 The NET-3 networking toolkit
ii openssl 0.9.7c-5 Secure Socket Layer (SSL) binary a
ii ssl-cert 1.0-7 Simple debconf wrapper for openssl
ii zlib1g 1:1.2.1-3 compression library - runtime
-- no debconf information
Reply to: