Skip to content

fix: remote access CA files permissions

Martin Matějek requested to merge fix/remote-ca-files-permissions into develop

From OpenWrt 21.02 on, mosquitto runs under it's own user (mosquitto), but CA files are created by foris-controller with owner root.

Mosquitto fails with following error:

Error: Unable to load server key file "/etc/ssl/ca/remote/01.key". Check keyfile.

Which in turn breaks other services using mosquitto as message bus. For example: foris-controller & reforis

This oneshot fix should set correct file permissions in case there already is remote access CA on the router.

Foris-controller should handle permissions for new CA created from scratch.

Edited by Martin Matějek

Merge request reports