[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: apache-ssl certificate generation problem/question



On Thu, 22 Jul 2004, Glen Mabey wrote:

> Hello,
>
> My certificate expired, so I tried to regenerate it.
>
> I ended up deleting /etc/apache-ssl/apache.pem , then 'dpkg-reconfigure
> apache-ssl'.
>
> Doing this first gives the error
> 	Document `apache-ssl' is not installed, cannot remove.
> but then continues on and asks all of the questions.
>
> What I found is that if I left the field 'Organisational Unit Name'
> blank, then the generation process failed later on.
>
> Once I did fill in everything correctly (I think) apache.pem was
> successfully generated but one of these commands (as reported by 'ps
> aux') did hang, I presume the last one:
>
> 	/usr/bin/perl -w /usr/sbin/dpkg-reconfigure apache-ssl
> 	/bin/bash /var/lib/dpkg/info/apache-ssl.postinst configure 1.3.29.0.2-4
> 	/bin/bash /usr/sbin/modules-config apache-ssl internal
>
> Perhaps this is related to #258951?
>
> What would be the "correct" way for one to go about regenerating a
> certificate?

If you are running testing/sarge you need to be sure that you are using
ssl-cert 1.0-8. Also the postinst script has been fixed a lot since than
but new apache can't enter testing/sarge.

Fabio

-- 
<user> fajita: step one
<fajita> Whatever the problem, step one is always to look in the error log.
<user> fajita: step two
<fajita> When in danger or in doubt, step two is to scream and shout.



Reply to: