Mailinglist Archive: opensuse-bugs (10810 mails)
| < Previous | Next > |
[Bug 546041] New: freeradius-server: package update corrupts certificates
- From: bugzilla_noreply@xxxxxxxxxx
- Date: Sun, 11 Oct 2009 11:16:15 -0600
- Message-id: <bug-546041-21960@xxxxxxxxxxxxxxxxxxxxxxxx/>
http://bugzilla.novell.com/show_bug.cgi?id=546041
Summary: freeradius-server: package update corrupts
certificates
Classification: openSUSE
Product: openSUSE 11.2
Version: Milestone 8
Platform: Other
OS/Version: Other
Status: NEW
Severity: Critical
Priority: P5 - None
Component: Network
AssignedTo: puzel@xxxxxxxxxx
ReportedBy: lnussel@xxxxxxxxxx
QAContact: qa@xxxxxxx
Found By: ---
/etc/raddb/certs/bootstrap runs make in that directory on new
package installation *and* update.
However, if the package is already installed 'make' tries to create
new certificates and fails for whatever reason. 'bootstrap' then
re-creates the ca therefore breaking everything.
IMO
- bootstrap should not be run on update at least. Even on package
install it's undesirable as creating the dh params takes a
*really* long time where you see nothing on screen when using yast
or zypper. radiusd is supposed to call bootstrap itself on first start.
- The commands in the Makefile need to be fixed to not fail nor
produce corrupt files when called if certificates already exist.
--
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
Summary: freeradius-server: package update corrupts
certificates
Classification: openSUSE
Product: openSUSE 11.2
Version: Milestone 8
Platform: Other
OS/Version: Other
Status: NEW
Severity: Critical
Priority: P5 - None
Component: Network
AssignedTo: puzel@xxxxxxxxxx
ReportedBy: lnussel@xxxxxxxxxx
QAContact: qa@xxxxxxx
Found By: ---
/etc/raddb/certs/bootstrap runs make in that directory on new
package installation *and* update.
However, if the package is already installed 'make' tries to create
new certificates and fails for whatever reason. 'bootstrap' then
re-creates the ca therefore breaking everything.
IMO
- bootstrap should not be run on update at least. Even on package
install it's undesirable as creating the dh params takes a
*really* long time where you see nothing on screen when using yast
or zypper. radiusd is supposed to call bootstrap itself on first start.
- The commands in the Makefile need to be fixed to not fail nor
produce corrupt files when called if certificates already exist.
--
Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
| < Previous | Next > |