Package: prosody Version: 0.11.1-1 Severity: normal Dear Maintainer,
I just updated to this version today. I was surprised to find my xmpp users all received certificate warnings, flagging old, expired, self-signed certificates offered by my system. On inspection, I found these two symlinks: /etc/prosody/certs/localhost.crt /etc/prosody/certs/localhost.key had been replaced and were (again) pointing to my crummy self-signed "snake oil" certificate instead of my current Let's Encrypt-issued certificate. If these symlinks exist, they should not be overwritten or modified (at least not without warning the administrator). Thanks, Scott sc...@cartasoft.com -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (990, 'testing'), (900, 'stable'), (500, 'stable-updates') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages prosody depends on: ii adduser 3.118 ii libc6 2.27-8 ii libidn11 1.33-2.2 ii libssl1.1 1.1.1a-1 ii lsb-base 10.2018112800 ii lua-bitop [lua5.2-bitop] 1.0.2-5 ii lua-expat [lua5.2-expat] 1.3.0-4 ii lua-filesystem [lua5.2-filesystem] 1.6.3-1 ii lua-sec [lua5.2-sec] 0.7-1 ii lua-socket [lua5.2-socket] 3.0~rc1+git+ac3201d-4 ii lua5.2 5.2.4-1.1+b2 ii ssl-cert 1.0.39 Versions of packages prosody recommends: ii lua-event [lua5.2-event] 0.4.5-1 Versions of packages prosody suggests: ii lua-dbi-mysql 0.7.1-1 pn lua-dbi-postgresql <none> pn lua-dbi-sqlite3 <none> ii lua-zlib 0.2+git+1+9622739-2.1 -- Configuration Files: /etc/prosody/conf.avail/example.com.cfg.lua [Errno 13] Permission denied: '/etc/prosody/conf.avail/example.com.cfg.lua' /etc/prosody/conf.avail/localhost.cfg.lua [Errno 13] Permission denied: '/etc/prosody/conf.avail/localhost.cfg.lua' /etc/prosody/prosody.cfg.lua [Errno 13] Permission denied: '/etc/prosody/prosody.cfg.lua' -- no debconf information
