[Bug 1133891] New: mono-core not installable on transactional server
http://bugzilla.opensuse.org/show_bug.cgi?id=1133891 Bug ID: 1133891 Summary: mono-core not installable on transactional server Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: 64bit OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening@forge.provo.novell.com Reporter: tickopa@gmail.com QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Created attachment 803994 --> http://bugzilla.opensuse.org/attachment.cgi?id=803994&action=edit full output from install command When attempting to install mono-core the post action executes `cert-sync`, mono's tool to generate its own certificate cache. On transactional server the certificate bundle is not available in the chroot, resulting in installation failure.
cert-sync /etc/ssl/ca-bundle.pem /etc/ssl/ca-bundle.pem is a symlink to /var/lib/ca-certificates/ca-bundle.pem.
/var/lib/ca-certificates does not contain a ca-bundle.pem or any certificates inside the transactional server chroot. ( 8/12) Installing: mono-core-5.10.1-lp150.1.6.x86_64 [............done] Additional rpm output: Mono Certificate Store Sync - version 5.10.1.47 Populate Mono certificate store from a concatenated list of certificates. Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD licensed. Couldn't retrieve the file using the supplied information. warning: %post(mono-core-5.10.1-lp150.1.6.x86_64) scriptlet failed, exit status 1 -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1133891 Seiji Hiwatari <hiwatari.seiji@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hiwatari.seiji@gmail.com -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1133891 Andreas Prittwitz <m4ng4n@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |m4ng4n@gmx.de -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1133891 http://bugzilla.opensuse.org/show_bug.cgi?id=1133891#c5 --- Comment #5 from Matthias Mailänder <matthias@mailaender.name> --- It is sadly required for SSL support in Mono applications. Otherwise nuget will fail with cryptic error messages that's why it is automated in %post. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1133891 http://bugzilla.opensuse.org/show_bug.cgi?id=1133891#c6 --- Comment #6 from Ignaz Forster <iforster@suse.com> --- "Fixed" by solving bug 1149131. Reading the man page it seems the cert-sync tool is indeed supposed to be called just once during installation (so it's following Microsoft documentation now). A real fix however would involve: * Changing the path of Mono's certificate store to a writable location * Calling cert-sync (as an update-ca-certificates plugin) on boot / whenever certificates have been changed -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1133891 http://bugzilla.opensuse.org/show_bug.cgi?id=1133891#c12 --- Comment #12 from OBSbugzilla Bot <bwiedemann+obsbugzillabot@suse.com> --- This is an autogenerated message for OBS integration: This bug (1133891) was mentioned in https://build.opensuse.org/request/show/930877 15.2 / transactional-update -- You are receiving this mail because: You are on the CC list for the bug.
participants (2)
-
bugzilla_noreply@novell.com
-
bugzilla_noreply@suse.com