Bug#927435: upgrade-reports: Buster upgrade: had to re-create unbound certs/keys
John Eikenberry <[email protected]>
| Newsgroups | gmane.linux.debian.user.testing |
|---|---|
| Message-ID | <20190419180749.GA20992__4834.90918283991$1555697367$gmane$org@ivanova.zhar.net> |
Package: upgrade-reports Severity: normal After upgrading to buster, unbound-control would fail to run with this error.. error: Error setting up SSL_CTX client cert 139765110753216:error:140AB18F:SSL routines:SSL_CTX_use_certificate:ee key too small:../ssl/ssl_rsa.c:310: To fix this I had to regenerate the certs and keys by removing the old ones and running unbound-control-setup, then restarting unbound. This fixed the issue. $ cd /etc/unbound/ $ sudo rm *.key *.pem $ sudo unbound-control-setup $ sudo systemctl restart unbound Note that with unbound-control broken, that broke `systemctl reload unbound` as it depends on unbound-control. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.19.0-4-amd64 (SMP w/4 CPU cores) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)