[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#926433: apache2: Invalid HTTP request to ocsp.int-x3.letsencrypt.org



Package: apache2
Version: 2.4.38-2
Severity: normal

Dear Maintainer,

After apache update to 2.4.38-1 /var/log/apache2/error.log has a lot of errors on each vhost like:
[gnutls:error] [pid 6466:tid 140231699207936] Invalid HTTP response status from ocsp.int-x3.letsencrypt.org: HTTP/1.0 400 Bad Request
[gnutls:warn] [pid 6466:tid 140231699207936] (104)Connection reset by peer: Async OCSP update failed for www.hostname.com:443, next update in 300 seconds.

Using configuration:
/etc/apache2/conf-enabled/:
apache2-doc.conf
charset.conf
javascript-common.conf
jsmath.conf
localized-error-pages.conf
other-vhosts-access-log.conf
php7.3-fpm.conf
phppgadmin.conf
security.conf
serve-cgi-bin.conf
servername.conf

/etc/apache2/mods-enabled/:
access_compat.load
actions.conf
actions.load
alias.conf
alias.load
auth_basic.load
authn_core.load
authn_file.load
authz_core.load
authz_groupfile.load
authz_host.load
authz_user.load
autoindex.conf
autoindex.load
cgi.load
deflate.conf
deflate.load
dir.conf
dir.load
env.load
fcgid.conf
fcgid.load
filter.load
gnutls.conf
gnutls.load
headers.load
include.load
mime.conf
mime.load
mime_magic.conf
mime_magic.load
mpm_event.conf
mpm_event.load
negotiation.conf
negotiation.load
perl.load
proxy.conf
proxy_fcgi.load
proxy.load
reqtimeout.conf
reqtimeout.load
rewrite.load
setenvif.conf
setenvif.load
socache_dbm.load
socache_shmcb.load
status.conf
status.load
substitute.load
userdir.conf
userdir.load
xsendfile.load

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- Package-specific info:

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.19.0-3-amd64 (SMP w/8 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=ru_RU.UTF-8, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8), LANGUAGE=ru_RU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages apache2 depends on:
ii  apache2-bin    2.4.38-2
ii  apache2-data   2.4.38-2
ii  apache2-utils  2.4.38-2
ii  dpkg           1.19.6
ii  lsb-base       10.2019031300
ii  mime-support   3.62
ii  perl           5.28.1-6
ii  procps         2:3.3.15-2

Versions of packages apache2 recommends:
ii  ssl-cert  1.0.39

Versions of packages apache2 suggests:
ii  apache2-doc                                      2.4.38-2
pn  apache2-suexec-pristine | apache2-suexec-custom  <none>
ii  chromium [www-browser]                           73.0.3683.75-1
ii  elinks [www-browser]                             0.13~20190125-3
ii  firefox [www-browser]                            66.0.1-1
ii  konqueror [www-browser]                          4:18.12.0-1
ii  links [www-browser]                              2.18-1+b10
ii  lynx [www-browser]                               2.8.9rel.1-3
ii  w3m [www-browser]                                0.5.3-37

Versions of packages apache2-bin depends on:
ii  libapr1                  1.6.5-1+b1
ii  libaprutil1              1.6.1-3+b2
ii  libaprutil1-dbd-sqlite3  1.6.1-3+b2
ii  libaprutil1-ldap         1.6.1-3+b2
ii  libbrotli1               1.0.7-2
ii  libc6                    2.28-8
ii  libcurl4                 7.64.0-2
ii  libjansson4              2.12-1
ii  libldap-2.4-2            2.4.47+dfsg-3
ii  liblua5.2-0              5.2.4-1.1+b2
ii  libnghttp2-14            1.37.0-1
ii  libpcre3                 2:8.39-12
ii  libssl1.1                1.1.1b-1
ii  libxml2                  2.9.4+dfsg1-7+b3
ii  perl                     5.28.1-6
ii  zlib1g                   1:1.2.11.dfsg-1

Versions of packages apache2-bin suggests:
ii  apache2-doc                                      2.4.38-2
pn  apache2-suexec-pristine | apache2-suexec-custom  <none>
ii  chromium [www-browser]                           73.0.3683.75-1
ii  elinks [www-browser]                             0.13~20190125-3
ii  firefox [www-browser]                            66.0.1-1
ii  konqueror [www-browser]                          4:18.12.0-1
ii  links [www-browser]                              2.18-1+b10
ii  lynx [www-browser]                               2.8.9rel.1-3
ii  w3m [www-browser]                                0.5.3-37

Versions of packages apache2 is related to:
ii  apache2      2.4.38-2
ii  apache2-bin  2.4.38-2


-- no debconf information


Reply to: