Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

On Certificate renewal permissions are reset to root on the private key, stopping the secondary from starting. #25

Open
cconstab opened this issue Nov 16, 2021 · 2 comments
Assignees
Labels
bug Something isn't working P2 Priority 2

Comments

@cconstab
Copy link
Member

Describe the bug
On Certificate renewal permissions are reset to root on the private key, stopping the secondary from starting.

To Reproduce
Steps to reproduce the behavior:

  1. Install Dess
  2. Renew Cert
  3. Secondary cannot start as the priv key is owned by root

Expected behavior
Cert renewal scripts need to permission the file to atsign

Additional context
seccheck caught this issue...

@cconstab cconstab added bug Something isn't working P2 Priority 2 labels Nov 16, 2021
@cconstab cconstab self-assigned this Nov 16, 2021
@XavierChanth
Copy link
Member

XavierChanth commented Jul 4, 2022

@realvarx is this maybe related to #31 ?

Edit: nvm, it is different...

@cpswan
Copy link
Member

cpswan commented Jul 5, 2022

I saw this with (just) one of the atsigns on cicd1

It turned out to be a permissions problem with restart.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working P2 Priority 2
Projects
None yet
Development

No branches or pull requests

3 participants