[BlueOnyx:22728] Re: invalid cert letsencrypt

[Tomohiro Hosaka]

Hi Michael,

2019年2月26日(火) 2:21 Michael Stauber <mstauber at blueonyx.it>:
>
> Hi Tomohiro,
>
> > -        _debug "writing token:$token to $wellknown_path/$token"
> > +        _debug "writing token:$token to $wellknown_path/$token umask:`umask`"
>
> Quick question: What "umask" do you get reported from the script?
>
> When I check with "umask" on a 5207R, 5208R or 5209R I get this:
>
> [root at 5208r ~]# umask
> 0022

ssh blueonyx
# umask
022
# ack le_install /usr/sausalito
/usr/sausalito/conf/base/ssl/base-ssl.conf
35:System.SSL.performLEinstall         perl:base/ssl/le_install.pl
        EXECUTE
36:Vsite.SSL.performLEinstall          perl:base/ssl/le_install.pl
        EXECUTE
37:System.SSL.performLErenew           perl:base/ssl/le_install.pl
        EXECUTE
38:Vsite.SSL.performLErenew            perl:base/ssl/le_install.pl
        EXECUTE
# cd /home/bokutin/svn/blueonyx-trunk/BlueOnyx/5207R
# ack -C 15 'umask.*27'
utils/cce/server/src/main.c
214-    /* open /dev/null for stdin/stdout */
215-    nfd = open("/dev/null", O_RDWR);
216-    if (nfd < 0) {
217-            CCE_SYSLOG("daemonize: open(\"/dev/null\" %s", strerror(errno));
218-            exit(1);
219-    }
220-    if ((dup2(nfd, STDIN_FILENO) != STDIN_FILENO)
221-     || (dup2(nfd, STDOUT_FILENO) != STDOUT_FILENO)) {
222-            CCE_SYSLOG("daemonize: dup2() %s", strerror(errno));
223-            exit(1);
224-    }
225-
226-    /* become session leader */
227-    setsid();
228-
229:    umask(027);
230-
231-    return 0;
232-}
233-
234-
235-static void
236-sighandle(int s)
237-{
238-    CCE_SYSLOG("caught signal %d", s);
239-
240-    /* do we know about this signal? */
241-    if (s == SIGHUP || s == SIGINT || s == SIGTERM || s == SIGQUIT) {
242-            /* exit cleanly */
243-            exithandle(0);
244-    } else {

The 5208R source code could not be found :)
https://devel.blueonyx.it/repos/trunk/BlueOnyx/

Thank you.

Tomohiro Hosaka

>
>
> --
> With best regards
>
> Michael Stauber
> _______________________________________________
> Blueonyx mailing list
> Blueonyx at mail.blueonyx.it
> http://mail.blueonyx.it/mailman/listinfo/blueonyx