Project

General

Profile

Anomalie #4057

Anomalie #3611: Template ca-eole.conf cert-eole.conf à revoir

cert.py à besoin ACInfraEducation.pem

Added by Emmanuel GARETTE over 7 years ago. Updated about 7 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Category:
-
Start date:
09/13/2012
Due date:
% Done:

100%

Spent time:
Distribution:
EOLE 2.4

Description

Erreur le fichier /etc/ssl/certs/ACInfraEducation.pem n'existe pas
Traceback (most recent call last):
File "/usr/bin/instance", line 342, in <module>
cert.gen_certs()
File "/usr/lib/pymodules/python2.7/creole/cert.py", line 162, in gen_certs
merge_ca()
File "/usr/lib/pymodules/python2.7/creole/cert.py", line 253, in merge_ca
concat_fic(ca_dest_file, ca_list, True)
File "/usr/lib/pymodules/python2.7/creole/cert.py", line 145, in concat_fic
f_src = file(fic_src)
IOError: [Errno 2] No such file or directory: '/etc/ssl/certs/ACInfraEducation.pem'

INSTANCE : Erreur => Erreur lors de la génération des certificats ([Errno 2] No such file or directory: '/etc/ssl/certs/ACInfraEducation.pem')
Il est possible de regénérer le CA locale et tous les certificats.
Utiliser la commande '/usr/share/creole/gen_certif.py -f'


Related issues

Related to eole-common - Anomalie #4407: IP/DNS dans ssl_subjectaltname_ns, ssl_subjectaltname_ip, web_url dans certif-eole.conf Fermé 11/04/2013 11/08/2013

Associated revisions

Revision 65631ed7 (diff)
Added by moyooo about 7 years ago

Webcal sync with \ on description
see #4057

History

#1 Updated by Daniel Dehennin over 7 years ago

  • Status changed from Nouveau to Accepté
  • Assigned To set to Daniel Dehennin
  • Target version set to Eole 2.4-dev-1

#2 Updated by Daniel Dehennin over 7 years ago

J’envisage d’utiliser la procédure de ca-certificates

La génération de la CA locale peut utiliser le même mécanisme, une fois la CA générée, elle est copié dans un répertoire et ca-certificates s’occupe du reste.

Il faudrait voir qui utilise explicitement /etc/ssl/certs/ca.crt car update-ca-certificates utilise un autre fichier.

#3 Updated by Daniel Dehennin over 7 years ago

  • Parent task set to #3611

#4 Updated by Daniel Dehennin over 7 years ago

  • Status changed from Accepté to Résolu
  • % Done changed from 0 to 100

La mise en place des certificats avec ca-certificates créé un lien symbolique dans /etc/ssl/certs/ :

root@eolebase:~# ls -l /etc/ssl/certs/ACInfraEducation.pem 
lrwxrwxrwx 1 root root 60 sept. 17 12:15 /etc/ssl/certs/ACInfraEducation.pem -> /usr/local/share/ca-certificates/menesr/ACInfraEducation.crt

Appliqué par commit da3f2f913123ddadfcb593c5e173af22275407bc
Appliqué par commit b8472a613407486d2dd846b287266f5f99540792
Packagé par commit 48801fa6a78bb56791158e3b06bd1bfd21bf6ee1

#5 Updated by Joël Cuissinat about 7 years ago

  • Status changed from Résolu to Fermé

Also available in: Atom PDF