[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#465279: ssl-cert: /var/lib/dpkg/info/ssl-cert.postinst of version 1.0.15 hangs inside chroot



Package: ssl-cert
Version: 1.0.15
Severity: important


Bootstrapping using a FAI based system the current ssl-cert version
1.0.15 hangs during installation:

% ps auxwww
[...]
root     17080  0.1  0.6  10620  8812 ttyp0    S+   16:05   0:00 /usr/bin/perl -w /usr/share/debconf/frontend /var/lib/dpkg/info/ssl-cert.postinst configure
root     17082  0.0  0.0   2724  1288 ttyp0    S+   16:05   0:00 /bin/sh -e /var/lib/dpkg/info/ssl-cert.postinst configure
root     17089  0.0  0.1   2740  1356 ttyp0    S+   16:05   0:00 /bin/bash -e /usr/sbin/make-ssl-cert generate-default-snakeoil
root     17093  0.0  0.1   3792  1452 ttyp0    S+   16:05   0:00 openssl req -config /tmp/tmp.ZkYAg17091 -new -x509 -days 3650 -nodes -out /etc/ssl/certs/ssl-cert-snakeoil.pem -keyout /etc/ssl/private/ssl-cert-snakeoil.key
[...]


Running the openssl command manually brings up:

17145:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 5


The content of /tmp/tmp.ZkYAg17091 is:

#
# SSLeay example configuration file.
#

RANDFILE                = $ENV::RANDFILE

[ req ]
default_bits            = 1024
default_keyfile         = privkey.pem
distinguished_name      = req_distinguished_name
prompt                  = no
policy                  = policy_anything

[ req_distinguished_name ]
commonName                      = randomname.grml.org


My chroot system (where ssl-cert can't be installed) is named "grml"
using /etc/hostname (but /etc/init.d/hostname.sh doesn't seem to be
executed), which is different from the outer system being
randomname.grml.org (where I'm bootstrapping from and what seems to
be the output of 'hostname -f'). Until now my setup always worked
just fine. Am I doing something wrong and it worked fine until now
just because of random luck or is the "hostname -f" change of
ssl-cert causing unwanted problems? :)

regards,
-mika-



Reply to: