On Tue, 2009-12-22 at 23:25 +0200, Mircea Mihai Carasel wrote:
> On Tue, Dec 22, 2009 at 9:32 PM, Paul Mossman <[email protected]> wrote:
> > Mircea wrote:
> > ...
> >> Here is the output:
> >> [r...@harkonen sipXecs]# ./sipxkeystoregen [r...@harkonen
> >> sipXecs]# echo $?
> >> 0
> >> [r...@harkonen sipXecs]#
> >> Everything seems fine.
> >
> > I see the same "Error regenerating KeyStores/TrustStore" error on my
> > system.
> >
> > Does sipXconfig call this script with root permissions?
> >
> > This might be the problem:
> >
> > [sipxcha...@bcmsl2030 JOURNAL]$
> > /home/sipxchange/WORKING/INSTALL/libexec/sipXecs/sipxkeystoregen
> > Exception in thread "main" java.io.FileNotFoundException:
> > /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.keystore
> > (Permission denied)
> >        at java.io.FileOutputStream.open(Native Method)
> >        at java.io.FileOutputStream.<init>(FileOutputStream.java:179)
> >        at java.io.FileOutputStream.<init>(FileOutputStream.java:131)
> >        at
> > org.sipfoundry.commons.sipkeystorebuilder.sipkeystorebuilder.main(sipkey
> > storebuilder.java:70)
> > [sipxcha...@bcmsl2030 JOURNAL]$ echo $?
> > 1
> > [sipxcha...@bcmsl2030 JOURNAL]$ ls -al
> > /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.*
> > -rw------- 1 sipxchange sipxchange 2247 Dec 18 11:18
> > /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.crt
> > -rw------- 1 sipxchange sipxchange  887 Dec 18 11:18
> > /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.key
> > -rw-r--r-- 1 root       root       1752 Dec 22 06:27
> > /home/sipxchange/WORKING/INSTALL/etc/sipxpbx/ssl/ssl-web.keystore
> 
> I looked at the sipXconfig code and I guess that this is the problem
> You are correct, sipXconfig apparently does not call this script with
> root permissions
> 
> I think that we should do the same trick as I did in my patch for XX-6850.
> There are many examples in sipXcommserverLib that I used for that patch.
> 
> But, please note that was no problem when XX-7234 was in, there was no
> root rights needed
> for calling this script. So it turns out that something did change after 
> all...
> >

No - the problem is that you've gotten your system to have the wrong
permissions on that file, not that the software needs root permissions.

_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/

Reply via email to