Bug#468789: ssl-cert configuration hangs
Package: ssl-cert
Version: 1.0.15
Severity: normal
I did "apt-get install ssl-cert" and it hanged after:
jozef@emo:~$ sudo apt-get install ssl-cert
Reading package lists... Done
Building dependency tree
Reading state information... Done
ssl-cert is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
2 not fully installed or removed.
After this operation, 0B of additional disk space will be used.
Setting up ssl-cert (1.0.15) ...
I did:
ps awuxf and got:
root 1773 0.0 0.3 5304 1016 ? Ss 14:00 0:00 /usr/sbin/sshd
root 2163 0.0 0.9 8064 2512 ? Ss 14:01 0:00 \_ sshd: jozef [priv]
jozef 2165 0.0 0.6 8208 1656 ? S 14:01 0:00 | \_ sshd: jozef@pts/0
jozef 2166 0.0 1.2 5892 3104 pts/0 Ss 14:01 0:00 | \_ -bash
root 2330 11.0 5.1 16964 13164 pts/0 S+ 14:08 0:00 | \_ apt-get install ssl-cert
root 2334 0.5 1.2 5800 3280 pts/2 Ss+ 14:08 0:00 | \_ /usr/bin/dpkg --status-fd 19
--configure ssl-ce
root 2335 5.0 3.2 11316 8220 pts/2 S+ 14:08 0:00 | \_ /usr/bin/perl -w
/usr/share/debconf/fronten
root 2341 0.2 0.4 3928 1188 pts/2 S+ 14:08 0:00 | \_ /bin/sh -e
/var/lib/dpkg/info/ssl-cert.
root 2343 0.0 0.4 3948 1276 pts/2 S+ 14:08 0:00 | \_ /bin/bash -e
/usr/sbin/make-ssl-cer
root 2347 0.0 0.5 3776 1440 pts/2 S+ 14:08 0:00 | \_ openssl req
-config /tmp/tmp.dT
The command on which it was hangig was:
openssl req -config /tmp/tmp.INrPef2390 -new -x509 -days 3650 -nodes -out /etc/ssl/certs/ssl-cert-snakeoil.pem
-keyout /etc/ssl/private/ssl-cert-snakeoil.key
I have executed it by hand and i got this output:
2410:error:0E065068:configuration file routines:STR_COPY:variable has no value:conf_def.c:629:line 5
On the line 5 there was:
RANDFILE = $ENV::RANDFILE
After i did:
export RANDFILE=/dev/urandom
and executed:
openssl req -config /tmp/tmp.INrPef2390 -new -x509 -days 3650 -nodes -out /etc/ssl/certs/ssl-cert-snakeoil.pem
-keyout /etc/ssl/private/ssl-cert-snakeoil.key
the instalation :
apt-get install ssl-cert
succeded without hanging (because the certificate was already generated)
-- System Information:
Debian Release: lenny/sid
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.22-3-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages ssl-cert depends on:
ii adduser 3.105 add and remove users and groups
ii debconf [debconf-2.0] 1.5.19 Debian configuration management sy
ii openssl 0.9.8g-4 Secure Socket Layer (SSL) binary a
ssl-cert recommends no packages.
-- debconf information:
make-ssl-cert/title:
make-ssl-cert/hostname: localhost
Reply to: