Actions
Bug #27254
open
Bug #27156: Do not send CA list on client authentication
Apache refuses to start when /var/rudder/lib/ssl/policy_server.pem is a symlink
Status:
Pending release
Priority:
N/A
Assignee:
Category:
Server components
Target version:
Pull Request:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
0
Name check:
To do
Fix check:
Error - Blocking
Regression:
No
Description
When we try to copy /var/rudder/cfengine-community/inputs/certs/policy-server.pem, which is a symlink, apache refuse to start, telling us that the file does not exist:
Jul 09 12:25:05 server httpd[76973]: AH00526: Syntax error on line 32 of /opt/rudder/etc/rudder-apache-relay-ssl.conf: Jul 09 12:25:05 server httpd[76973]: SSLCADNRequestFile: file '/var/rudder/lib/ssl/policy_server.pem' does not exist or is empty
While:
[root@server vagrant]# ll /var/rudder/lib/ssl/policy_server.pem lrwxrwxrwx. 1 root rudder 8 Jul 9 08:31 /var/rudder/lib/ssl/policy_server.pem -> root.pem [root@server vagrant]# ll /var/rudder/lib/ssl/root.pem -rw-r-----. 1 root rudder 1894 Jul 9 08:35 /var/rudder/lib/ssl/root.pem cat /var/rudder/lib/ssl/policy_server.pem -----BEGIN CERTIFICATE----- MIIFSzCCAzOgAwIBAgIUI5ZJHwI/wFbd9VF4CTMeJ3ChRccwDQYJKoZIhvcNAQEL BQAwFjEUMBIGCgmSJomT8ixkAQEMBHJvb3QwHhcNMjUwNzA5MDgyOTE3WhcNMzUw NzA3MDgyOTE3WjAWMRQwEgYKCZImiZPyLGQBAQwEcm9vdDCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMKFlne/p6Wo8pCFuRkF7etkDLC0vWqLML5LRF1B 1+1wEdY8Eq/WRTF7wK6SKIRCLLJttsbEVw6zP5lSmTBqQrOYSooWhBFyXmU+SvAL ....
So we need to copy root.pem directly
Files
Updated by 
Updated by 
Updated by
Actions