[Pkg-javascript-devel] Bug#638200: javascript-common: install/remove fail and causes shell control loss when using passworded SSL key with HTTP server

[Chris Knadle]

Package: javascript-common
Version: 7
Severity: important

-----------------------------------------------------------

Greetings.

Unfortunately the way the install/remove scripts are currently written, both
installation and removal fails and also causes loss of control of the shell
when an SSL key with a password is used with the HTTP server, because they
both cause a RESTART on the HTTP server rather than a RELOAD.  The password
prompt for the SSL key is not shown, and hitting CTRL-C does not break out
of the problem, so the end result is whiptail using 100% CPU time, loosing
control of the shell, and an install/remove script that never terminates.

The line in both the postinst and postrm scrip that is the problem is:

  . /usr/share/wwwconfig-common/restart.sh

[BTW this is likewise in the javascript-common pacakge in Unstable.]

Presumably the SSL passowrd prompt is sent to wwwconfig-common, rather
than to the terminal where it must go.  This leaves the user clueless.  :-/


To allow installation or removal, I had to modify /usr/share/wwwconfig-common/restart.sh
to cause a reload rather than a restart.


I need to refer to the Debian Maintainer's guide, but I get the feeling
the severity of this should probably be "serious".

  -- Chris

--
Chris Knadle
Chris.Knadle at coredump.us

-----------------------------------------------------------

-- System Information:
Debian Release: 6.0.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.32-5-686 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages javascript-common depends on:
ii  wwwconfig-common              0.2.1      Debian web auto configuration

javascript-common recommends no packages.

Versions of packages javascript-common suggests:
ii  apache2                2.2.16-6+squeeze1 Apache HTTP Server metapackage
ii  apache2-mpm-prefork [h 2.2.16-6+squeeze1 Apache HTTP Server - traditional n

-- no debconf information