FEDORA-2025-e0a50f3ae2 — unspecified update for sscg

unpushed

sscg-4.0.1-1.fc43

FEDORA-2025-e0a50f3ae2 created by sgallagh 4 months ago for Fedora 43

Update to SSCG 4.0.1

Drop dependency on libpath_utils
Minor fixes and code cleanups

This update has been submitted for testing by sgallagh.

4 months ago

This update's test gating status has been changed to 'waiting'.

4 months ago

This update's test gating status has been changed to 'failed'.

4 months ago

This update has been pushed to testing.

4 months ago

geraldosimiao provided feedback 4 months ago

karma

derekenz commented & provided feedback 4 months ago

karma

Works

frenaud commented & provided feedback 4 months ago

karma

With this version, IPA fails to obtain an ACME certificate using mod_md and mod_ssl. Mod_ssl is launching the service httpd-init (Unit file stored in /usr/lib/systemd/system/httpd-init.service) which calls /usr/libexec/httpd-ssl-gencerts. This command in turn calls sscg with the following arguments:

sscg -q \
     --cert-file           /etc/pki/tls/certs/localhost.crt         \
     --cert-key-file       /etc/pki/tls/private/localhost.key       \
     --ca-file             /etc/pki/tls/certs/localhost.crt         \
     --no-dhparams-file                                             \
     --lifetime            365                                      \
     --hostname            $FQDN                                    \
     --email               root@$FQDN

With sscg-4.0.0-1.fc43.x86_64, there is no issue. With sscg-4.0.1-1.fc43, the command fails, likely because we provide the same file for the cert and the CA.

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

4 months ago

sgallagh commented 3 months ago

This update has been unpushed.

sgallagh commented 3 months ago

Thanks for reporting the regression. I've fixed it in SSCG 4.0.2 which I will be submitting today.

Please log in to add feedback.

Metadata

Type

unspecified

Karma

Signed

Content Type

RPM

Test Gating

failed

Autopush Settings

Unstable by Karma

-1

Stable by Karma

disabled

Stable by Time

disabled

Thresholds

Minimum Karma

Minimum Testing

14 days

Dates

submitted

4 months ago

in testing

4 months ago

Builds

sscg-4.0.1-1.fc43

Automated Test Results

For help debugging failed Fedora CI tests (fedora-ci.*), contact the Fedora CI team.
For help debugging failed Fedora CoreOS tests (coreos.*), contact the Fedora CoreOS team.
For help debugging failed openQA tests (update.*), contact the Fedora Quality team, who will usually investigate and diagnose all failures within 24 hours.

failed