Project

General

Profile

Actions

Bug #27254

open

Bug #27156: Do not send CA list on client authentication

Apache refuses to start when /var/rudder/lib/ssl/policy_server.pem is a symlink

Added by François ARMAND 2 days ago. Updated about 1 hour ago.

Status:
Pending release
Priority:
N/A
Category:
Server components
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Error - Blocking
Regression:
No

Description

When we try to copy /var/rudder/cfengine-community/inputs/certs/policy-server.pem, which is a symlink, apache refuse to start, telling us that the file does not exist:

Jul 09 12:25:05 server httpd[76973]: AH00526: Syntax error on line 32 of /opt/rudder/etc/rudder-apache-relay-ssl.conf:
Jul 09 12:25:05 server httpd[76973]: SSLCADNRequestFile: file '/var/rudder/lib/ssl/policy_server.pem' does not exist or is empty

While:

[root@server vagrant]# ll /var/rudder/lib/ssl/policy_server.pem
lrwxrwxrwx. 1 root rudder 8 Jul  9 08:31 /var/rudder/lib/ssl/policy_server.pem -> root.pem
[root@server vagrant]# ll /var/rudder/lib/ssl/root.pem
-rw-r-----. 1 root rudder 1894 Jul  9 08:35 /var/rudder/lib/ssl/root.pem
cat /var/rudder/lib/ssl/policy_server.pem
-----BEGIN CERTIFICATE-----
MIIFSzCCAzOgAwIBAgIUI5ZJHwI/wFbd9VF4CTMeJ3ChRccwDQYJKoZIhvcNAQEL
BQAwFjEUMBIGCgmSJomT8ixkAQEMBHJvb3QwHhcNMjUwNzA5MDgyOTE3WhcNMzUw
NzA3MDgyOTE3WjAWMRQwEgYKCZImiZPyLGQBAQwEcm9vdDCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAMKFlne/p6Wo8pCFuRkF7etkDLC0vWqLML5LRF1B
1+1wEdY8Eq/WRTF7wK6SKIRCLLJttsbEVw6zP5lSmTBqQrOYSooWhBFyXmU+SvAL
....

So we need to copy root.pem directly


Files

clipboard-202507101425-lvrdj.png (20.5 KB) clipboard-202507101425-lvrdj.png François ARMAND, 2025-07-10 14:25

Subtasks 1 (1 open0 closed)

Bug #27268: On root, /var/rudder/lib/ssl/policy_server.pem can not be copied with a mixed of logic and selinuxNewActions
Actions

Also available in: Atom PDF