[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#794383: apache2: Upgrade to apache2-2.2.22-13+deb7u5 breaks CA certificate chain



Package: apache2.2-common
Version: 2.2.22-13+deb7u5
Severity: important

Dear Maintainer,

I today upraded to 2.2.22-13+deb7u5. After the upgrade, I noticed that
apache2 wouldn't start up anymore. After examining the log files, I
found this line:

[Sun Aug 02 13:19:52 2015] [error] Failed to configure CA certificate chain!

My configuration (which hasn't changed since 2.2.22-13+deb7u4) looks
like this:

SSLEngine on
SSLCertificateFile /etc/ssl/certs/wildcard.felicitus.org.crt
SSLCertificateChainFile /etc/ssl/certs/sub.class2.server.sha2.ca.pem
SSLCertificateKeyFile /etc/ssl/private/wildcard.felicitus.org.key

When downgrading to 2.2.22-13+deb7u4, the web server can be started again.

-- Package-specific info:
List of enabled modules from 'apache2 -M':
  alias auth_basic authn_file authz_default authz_groupfile
  authz_host authz_user autoindex cgi deflate dir env mime
  negotiation php5 proxy_http proxy reqtimeout rewrite setenvif ssl
  status
List of enabled php5 extensions:
  apc curl gd geoip imagick mysql mysqli pdo pdo_mysql xsl

-- System Information:
Debian Release: 7.8
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/3 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages apache2 depends on:
ii  apache2-mpm-itk   2.2.22-13+deb7u4
ii  apache2.2-common  2.2.22-13+deb7u4

apache2 recommends no packages.

apache2 suggests no packages.

Versions of packages apache2.2-common depends on:
ii  apache2-utils  2.2.22-13+deb7u5
ii  apache2.2-bin  2.2.22-13+deb7u4
ii  lsb-base       4.1+Debian8+deb7u1
ii  mime-support   3.52-1+deb7u1
ii  perl           5.14.2-21+deb7u2
ii  procps         1:3.3.3-3

Versions of packages apache2.2-common recommends:
ii  ssl-cert  1.0.32

Versions of packages apache2.2-common suggests:
pn  apache2-doc                             <none>
pn  apache2-suexec | apache2-suexec-custom  <none>
ii  w3m [www-browser]                       0.5.3-8

-- no debconf information


Reply to: