https://issues.apache.org/bugzilla/show_bug.cgi?id=52630
--- Comment #14 from Christoph Anton Mitterer <[email protected]> 2012-04-04 23:31:05 UTC --- Nevertheless may I suggest to "use" this ticket to clarify documentation a bit: As far as I understand, Apache starts as user root and after some initialisation suids to some other user (e.g. www-data or so). I must assume, that mod_ssl already loads some of its files in the root-user context, because all the host certificates/keys, i.e. the files specified by: - SSLCertificateFile - SSLCertificateKeyFile - SSLCertificateChainFile were then root owned (and root-only readable), too. But apparently (which is why I had all the troubles above) this is different for some/all of the files specified by: - SSLCACertificateFile/Path - SSLCADNRequestFile/Path - SSLCARevocationFile/Path and they are read as (e.g.) www-data. So could you please add information to mod_ssls documentation for ALL of the 9 directives mentioned above: a) under which context the files are read (root or apache-user) b) whether they are constantly re-read or not This is not only important as the they suid has already happened "later" but also in general, as these files may change and people want to know whether they have to restart the server for changes to get noticed. Cheers, Chris. Oh and btw: Thanks for all your help with this "issue". :-) -- Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
