#28 prevent sscg writing /dhparams.pem
Closed a year ago by luhliarik. Opened a year ago by jorton.
rpms/ jorton/httpd httpd-init-fix  into  rawhide

file modified
+2 -1
@@ -8,5 +8,6 @@ 

  [Service]

  Type=oneshot

  RemainAfterExit=no

- 

+ ReadOnlyPaths=/

+ ReadWritePaths=/etc/pki/tls

  ExecStart=/usr/libexec/httpd-ssl-gencerts

file modified
+4 -1
@@ -24,7 +24,7 @@ 

  Summary: Apache HTTP Server

  Name: httpd

  Version: 2.4.54

- Release: 10%{?dist}

+ Release: 11%{?dist}

  URL: https://httpd.apache.org/

  Source0: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2

  Source1: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2.asc
@@ -854,6 +854,9 @@ 

  %{_rpmconfigdir}/macros.d/macros.httpd

  

  %changelog

+ * Fri Jan 13 2023 Joe Orton <jorton@redhat.com> - 2.4.54-11

+ - prevent sscg writing /dhparams.pem

+ 

  * Tue Dec 20 2022 Joe Orton <jorton@redhat.com> - 2.4.54-10

  - htcacheclean.service: add [Install] section, PrivateTmp=yes,

    Environment=LANG=C (#2149714)

no initial comment

Build failed. More information on how to proceed and troubleshoot errors available at https://fedoraproject.org/wiki/Zuul-based-ci

Once the sscg 3.0.3 updates land this should be redone by having httpd-ssl-gencerts pass --dhparams-file=.../localhost.crt as well.

Pull-Request has been closed by luhliarik

a year ago
Metadata