search

baiwyc119 / lxmppd

Automatically exported from code.google.com/p/lxmppd
0 stars 0 forks source link

Fails to load root-only key files. #456

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
When only root has permission to read key files, prosody gives this:

certmanager     error   SSL/TLS: Failed to load 
'/etc/ssl/prosody/mysite-ssl.key': Check that the permissions allow Prosody to 
read this file. (for *)
certmanager     error   SSL/TLS: Failed to load 
'/etc/ssl/prosody/mysite-ssl.key': Previous error (see logs), or other system 
error. (for mysite.com)
mysite.com:tls error   Unable to initialize TLS: error loading private key 
(system lib)
certmanager     error   SSL/TLS: Failed to load 
'/etc/ssl/prosody/mysite-ssl.key': Previous error (see logs), or other system 
error. (for mysite.com)
mysite.com:tls error   Unable to initialize TLS: error loading private key 
(system lib)
certmanager     error   SSL/TLS: Failed to load 
'/etc/ssl/prosody/mysite-ssl.key': Check that the permissions allow Prosody to 
read this file. (for localhost)
localhost:tls   error   Unable to initialize TLS: error loading private key 
(Permission denied)
certmanager     error   SSL/TLS: Failed to load 
'/etc/ssl/prosody/mysite-ssl.key': Previous error (see logs), or other system 
error. (for localhost)
localhost:tls   error   Unable to initialize TLS: error loading private key 
(system lib)

Apache, postfix, and other servers read these files as root before changing to 
the user they run.

Original issue reported on code.google.com by j...@jc-bell.com on 1 Jan 2015 at 7:26