Bug#267430: apache-ssl fails to start with erronous symlink in directory specified as SSLCACertificatePath

[Mario Lipinski <law@taz.gymszbad.de>]

Package: apache-ssl
Version: 1.3.31-3
Severity: normal

apache-ssl fails to start with erronous symlink in directory specified
as SSLCACertificatePath. an error gets logged in some wired location.
the only place where the error log was specified was in a vhost config.
i guess it was that one with the oldest date.
[Sun Aug 22 17:11:06 2004] [crit] error reading CA certs
[Sun Aug 22 17:11:06 2004] [crit] error:0906D06C:PEM
routines:PEM_read_bio:no start line
[Sun Aug 22 17:11:06 2004] [crit] error:0906D06C:PEM
routines:PEM_read_bio:no start line
[Sun Aug 22 17:11:06 2004] [crit] error:02001002:system library:fopen:No
such file or directory
[Sun Aug 22 17:11:06 2004] [crit] error:20074002:BIO
routines:FILE_CTRL:system lib

I found this one by stracing the apache-ssl process (altough i am not
experienced with debugging processes). There was although the error
message, that the particular file (from the broken symlink) could not
be opened.

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.6-taz.gymszbad.de
Locale: LANG=C, LC_CTYPE=C

Versions of packages apache-ssl depends on:
ii  apache-common               1.3.31-3     Support files for all Apache webse
ii  debconf                     1.4.30       Debian configuration management sy
ii  dpkg                        1.10.23      Package maintenance system for Deb
ii  libc6                       2.3.2.ds1-13 GNU C Library: Shared libraries an
ii  libdb4.2                    4.2.52-16    Berkeley v4.2 Database Libraries [
ii  libexpat1                   1.95.6-8     XML parsing C library - runtime li
ii  libkeynote0                 2.3-10       Decentralized Trust-Management sys
ii  libmagic1                   4.09-1       File type determination library us
ii  libpam0g                    0.76-22      Pluggable Authentication Modules l
ii  libssl0.9.7                 0.9.7d-4     SSL shared libraries
ii  logrotate                   3.7-2        Log rotation utility
ii  mime-support                3.28-1       MIME files 'mime.types' & 'mailcap
ii  openssl                     0.9.7d-4     Secure Socket Layer (SSL) binary a
ii  perl                        5.8.4-2      Larry Wall's Practical Extraction 
ii  ssl-cert                    1.0-8        Simple debconf wrapper for openssl

-- debconf information:
* apache-ssl/server-admin: root@taz.gymszbad.de
* apache-ssl/enable-suexec: false
* apache-ssl/init: true
* apache-ssl/server-name: taz.gymszbad.de
* apache-ssl/document-root: /var/www