Bug#794383: apache2: Upgrade to apache2-2.2.22-13+deb7u5 breaks CA certificate chain
Package: apache2.2-common
Version: 2.2.22-13+deb7u5
Severity: important
Dear Maintainer,
I today upraded to 2.2.22-13+deb7u5. After the upgrade, I noticed that
apache2 wouldn't start up anymore. After examining the log files, I
found this line:
[Sun Aug 02 13:19:52 2015] [error] Failed to configure CA certificate chain!
My configuration (which hasn't changed since 2.2.22-13+deb7u4) looks
like this:
SSLEngine on
SSLCertificateFile /etc/ssl/certs/wildcard.felicitus.org.crt
SSLCertificateChainFile /etc/ssl/certs/sub.class2.server.sha2.ca.pem
SSLCertificateKeyFile /etc/ssl/private/wildcard.felicitus.org.key
When downgrading to 2.2.22-13+deb7u4, the web server can be started again.
-- Package-specific info:
List of enabled modules from 'apache2 -M':
alias auth_basic authn_file authz_default authz_groupfile
authz_host authz_user autoindex cgi deflate dir env mime
negotiation php5 proxy_http proxy reqtimeout rewrite setenvif ssl
status
List of enabled php5 extensions:
apc curl gd geoip imagick mysql mysqli pdo pdo_mysql xsl
-- System Information:
Debian Release: 7.8
APT prefers oldstable-updates
APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/3 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages apache2 depends on:
ii apache2-mpm-itk 2.2.22-13+deb7u4
ii apache2.2-common 2.2.22-13+deb7u4
apache2 recommends no packages.
apache2 suggests no packages.
Versions of packages apache2.2-common depends on:
ii apache2-utils 2.2.22-13+deb7u5
ii apache2.2-bin 2.2.22-13+deb7u4
ii lsb-base 4.1+Debian8+deb7u1
ii mime-support 3.52-1+deb7u1
ii perl 5.14.2-21+deb7u2
ii procps 1:3.3.3-3
Versions of packages apache2.2-common recommends:
ii ssl-cert 1.0.32
Versions of packages apache2.2-common suggests:
pn apache2-doc <none>
pn apache2-suexec | apache2-suexec-custom <none>
ii w3m [www-browser] 0.5.3-8
-- no debconf information
Reply to: