Hello
Launchpad
2 bugs need attention:
LP #2163152 libp11 — EAP-TLS Wi-Fi broken with TPM-backed PKCS#11 keys after upgrade to 0.4.12-1.1ub…
I added into the Server todo list.
LP #2163358 apache2 — Broken md module due to restriction in apache2.service file
The apache2 systemd unit (debian/apache2.service) sets ProtectSystem=full,
which makes /etc read-only for the apache2 process at runtime. Only
/var/log/apache2 and /var/cache/apache2/mod_cache_disk are whitelisted via
ReadWritePaths=. mod_md’s default MDStoreDir is a directory named “md” resolved relative to
the server root (/etc/apache2 by default), so it needs to write to /etc/apache2/md. That path is not in ReadWritePaths=, so any vhost using an “MDomain” directive fails to start apache2.
This issue has been reported to Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1125111
and the discussion is around if writing data to /etc is a good behavior. Some people think that it is better to fix this issue upstream.
GitHub
no activity
Discourse
no activity