Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 26505 - adding dependency for sshd in init.d script for apache
Summary: adding dependency for sshd in init.d script for apache
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Web Application Packages Maintainers
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-08-12 15:27 UTC by Andreas Lööw
Modified: 2003-09-26 19:18 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Andreas Lööw 2003-08-12 15:27:16 UTC
The current rc-script for apache uses these settings:

depend() {
        need net
        use mysql dns logger netmount
}

When using ssl and the certificate encrypted, apache halts the startup while
waiting for a password.

If this is done on a server without keyboard and monitor attatched to it, it
stops the machine from booting unless the administrator connecting a keyboard
and monitor to enter the password.

Proposed solution:

add ssh to the "use" options in the dependencies, this will ensure that sshd is
started before apache, thus allowing the administrator to resolve the problem
without physichal access to the computer.


Reproducible: Always
Steps to Reproduce:
1. Create a encrypted certificate for mod_ssl
2. Add apache to the daemons that will be started at boot
3. Reboot the computer.
Comment 1 Andreas Lööw 2003-08-12 15:47:07 UTC
Sorry for this, it would be better to use "after ssh" in the depend() section indtead of adding it in use.

And this is for apache, just to get that word inside the report for the search features.
Comment 2 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2003-09-08 14:44:42 UTC
simple solution, don't put a passphrase on that certificate 
and protect it strongly instead. 
 
woodchip: can you set apache up to not ask for input and just fail if it needs input? 
it should not halt the boot process at all. 
Comment 3 Donny Davies (RETIRED) gentoo-dev 2003-09-08 17:20:14 UTC
Robin: I've already made this change, its completely reasonable to me.

ALthough I've not yet commited the round of updates yet, as I've not
been able to track you and Stuart down on irc for a few days to discuss
any matters.

Basically that round of updates I mentioned are ready here on my
hard drive, and I need to co-ordinate with you two before I stuff them in.
Comment 4 Donny Davies (RETIRED) gentoo-dev 2003-09-26 19:18:44 UTC
i added that to the rc-script.