Your message dated Thu, 21 May 2020 13:42:57 +0200
with message-id <20200521114257.GA2096@nuc>
and subject line Re: Bug#960587: janus: Server does not start out of the box, 
wrong key path
has caused the Debian Bug report #960587,
regarding janus: Server does not start out of the box, wrong key path
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
960587: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960587
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: janus
Version: 0.9.2-1~bpo10+1
Tags: patch

Dear maintainer:

After installing janus from buster-backports on a Debian 10 system,
I noticed that it does not start and this message is shown in the logs:

[FATAL] [dtls.c:janus_dtls_load_keys:343] Error opening key file

I fixed the problem for now by applying the patch below.

Yes, I should use a real certificate instead, but we can reasonable
assume that the intent of having a default config file referencing
snakeoil certificates (as done by postfix, for example), is to have
the package up and running as soon as possible, therefore I believe
the default config file for this janus backport should reference
the real path of snakeoil certificates in buster.

Please note that I have not tested the package in testing. Maybe
snakeoil certificates in testing are now in /etc/ssl/certs, but even
in this case, it would still a good idea to reference the path in buster
for the buster backport.

Thanks a lot.

--- a/janus/janus.jcfg
+++ b/janus/janus.jcfg
@@ -104,7 +104,7 @@ general: {
 # Certificate and key to use for DTLS (and passphrase if needed).
 certificates: {
        cert_pem = "/etc/ssl/certs/ssl-cert-snakeoil.pem"
-       cert_key = "/etc/ssl/certs/ssl-cert-snakeoil.key"
+       cert_key = "/etc/ssl/private/ssl-cert-snakeoil.key"
        #cert_pwd = "secretpassphrase"
 }
 

--- End Message ---
--- Begin Message ---
Hi.

After rechecking I've noticed that the file really came from janus in buster
(which I installed before upgrading to version in buster-backports).

I now see that the janus package in backports does not include
janus.jcfg, only janus.jcfg.sample (and the *.sample file is ok).

As I believe this is a bug in the buster version of janus that you
will likely not want to fix, because it's neither a security bug
or a FTBFS bug, I'm closing the bug myself.

(Today I tried janus from janus-backports, copied all *.sample files
over their *.jcfg counterparts, and this time janus started out of the box).

Thanks and sorry for the false alarm.

--- End Message ---

Reply via email to