On Tue, Dec 22, 2009 at 9:32 PM, Paul Mossman <[email protected]> wrote:
> Mircea wrote:
> ...
>> Here is the output:
>> [r...@harkonen sipXecs]# ./sipxkeystoregen [r...@harkonen
>> sipXecs]# echo $?
>> 0
>> [r...@harkonen sipXecs]#
>> Everything seems fine.
>
> I see the same "Error regenerating KeyStores/TrustStore" error on my
> system.
>
> Does sipXconfig call this script with root permissions?
>
> This might be the problem:
>
> [sipxcha...@bcmsl2030 JOURNAL]$
> /home/sipxchange/WORKING/INSTALL/libexec/sipXecs/sipxkeystoregen
> Exception in thread "main" java.io.FileNotFoundException:
> /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.keystore
> (Permission denied)
>        at java.io.FileOutputStream.open(Native Method)
>        at java.io.FileOutputStream.<init>(FileOutputStream.java:179)
>        at java.io.FileOutputStream.<init>(FileOutputStream.java:131)
>        at
> org.sipfoundry.commons.sipkeystorebuilder.sipkeystorebuilder.main(sipkey
> storebuilder.java:70)
> [sipxcha...@bcmsl2030 JOURNAL]$ echo $?
> 1
> [sipxcha...@bcmsl2030 JOURNAL]$ ls -al
> /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.*
> -rw------- 1 sipxchange sipxchange 2247 Dec 18 11:18
> /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.crt
> -rw------- 1 sipxchange sipxchange  887 Dec 18 11:18
> /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.key
> -rw-r--r-- 1 root       root       1752 Dec 22 06:27
> /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.keystore

I looked at the sipXconfig code and I guess that this is the problem
You are correct, sipXconfig apparently does not call this script with
root permissions

I think that we should do the same trick as I did in my patch for XX-6850.
There are many examples in sipXcommserverLib that I used for that patch.

But, please note that was no problem when XX-7234 was in, there was no
root rights needed
for calling this script. So it turns out that something did change after all...
>
>
> -Paul
> [email protected]
>
>
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to