Permission denied while openig a certificate

Discussion:

(too old to reply)

Israel Fernández Cabrera

2005-10-15 16:17:00 UTC

Hi all...

This is my last resource and I should say that I'm desperate... I've
to make a release and I don't know how to solve the following.
I'm working in a project using Linux Fedora Core 4 + MySQL + sendmail
+ our own services and daemons. This release include many security
enhancements. Using secure SSL connections with the service is one of
the most important.
I know this is not a MySQL discussion list, but the guys in MySQL
list and Fedora list did not help me.
Ok, the facts...
I've created my own certificates, I've configure MySQL accordint to
the documentation, but... I'm watching a very estrange behaviour. If I
start MySQL from the /etc/rc.d/init.d/ folder I get a permission
denied reading the .pem files. But then if I copy the same script to a
different folder and run it from there, this error disappear, just
like that.
The .pem files are chmoded to 777 and owned as root.mysql.
I've even used strace triying to find a hidden previous error
condition but nothing new, the open system call fails returning
EACCESS.
I write to this list because the error is reported by the openssl
library, used by MySQL but maybe you have hear it before.
I'll appreciate any help, thanks in advance for your time

cheers

--
____________________
Israel Fdez. Cabrera
***@gmail.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-***@openssl.org
Automated List Manager ***@openssl.org

Joseph Oreste Bruni

2005-10-15 17:03:38 UTC

Permalink

--Apple-Mail-2-764716884
Content-Type: multipart/alternative;
boundary=Apple-Mail-1-764716367

--Apple-Mail-1-764716367
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=ISO-8859-1;
delsp=yes;
format=flowed

The permissions you need on these files are "444" not "777", but =20
that's not your problem.

I believe that mysql runs as a user other than root. On most systems =20
a seperate "mysql" user account is created and the daemon switches to =20=

that account at startup.

The EACCESS error would mean that some directory along the full path =20
does not have the x bit set in a way that is useful for the mysql =20
user. Make sure that every directory from "/" on down to the file has =20=

the x bit set in the "other" position.

"ls" with the -ld options will be your friend in this case as you =20
examine each and every directory along the path to the file.

Post by Israel FernÃ¡ndez Cabrera
The .pem files are chmoded to 777 and owned as root.mysql.
I've even used strace triying to find a hidden previous error
condition but nothing new, the open system call fails returning
EACCESS.

--Apple-Mail-1-764716367
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
charset=ISO-8859-1

<HTML><BODY style=3D"word-wrap: break-word; -khtml-nbsp-mode: space; =
-khtml-line-break: after-white-space; "><DIV>The permissions you need on =
these files are "444" not "777", but that's not your =
problem.</DIV><DIV><BR class=3D"khtml-block-placeholder"></DIV><DIV>I =
believe that mysql runs as a user other than root. On most systems a =
seperate "mysql" user account is created and the daemon switches to that =
account at startup.</DIV><DIV><BR =
class=3D"khtml-block-placeholder"></DIV><DIV>The EACCESS error would =
mean that some directory along the full path does not have the x bit set =
in a way that is useful for the mysql user. Make sure that every =
directory from "/" on down to the file has the x bit set in the "other" =
position.</DIV><DIV><BR class=3D"khtml-block-placeholder"></DIV><DIV>"ls" =
with the -ld options will be your friend in this case as you examine =
each and every directory along the path to the =
file.</DIV><BR><DIV><DIV>On Oct 15, 2005, at 9:16 AM, Israel Fern=E1ndez =
Cabrera wrote:</DIV><BR class=3D"Apple-interchange-newline"><BLOCKQUOTE =
type=3D"cite"><P style=3D"margin: 0.0px 0.0px 0.0px 0.0px"><FONT =
face=3D"Helvetica" size=3D"3" style=3D"font: 12.0px Helvetica">The .pem =
files are chmoded to 777 and owned as root.mysql.</FONT></P> <P =
style=3D"margin: 0.0px 0.0px 0.0px 0.0px"><FONT face=3D"Helvetica" =
size=3D"3" style=3D"font: 12.0px Helvetica">I've even used strace =
triying to find a hidden previous error</FONT></P> <P style=3D"margin: =
0.0px 0.0px 0.0px 0.0px"><FONT face=3D"Helvetica" size=3D"3" =
style=3D"font: 12.0px Helvetica">condition but nothing new, the open =
system call fails returning</FONT></P> <P style=3D"margin: 0.0px 0.0px =
0.0px 0.0px"><FONT face=3D"Helvetica" size=3D"3" style=3D"font: 12.0px =
Helvetica">EACCESS.</FONT></P> <BR =
class=3D"Apple-interchange-newline"></BLOCKQUOTE></DIV><BR></BODY></HTML>=

--Apple-Mail-1-764716367--

--Apple-Mail-2-764716884
Content-Transfer-Encoding: base64
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Disposition: attachment;
filename=smime.p7s
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--Apple-Mail-2-764716884--
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-***@openssl.org
Automated List Manager ***@openssl.org

Israel Fernández Cabrera

2005-10-15 18:36:16 UTC

Permalink

Thanks Joseph for your quick response, it is the first one since I'm
struggling with this issue.
I'd like the solution would be as simple, that is why I said before
this is an annoying issue.
All the folders in the path to the certificates file has x bit set,
just to be sure I've checked it again. I changed the owners of the
.pem files from root.mysql to mysql.mysql and fixing my permission
paranoia I chmod from 777 to 444 the certificates too.
Result: same problem

Any hint? I gave an eye to the openssl source code reported in the
mysqld.log file but I found nothing interesting...

thanks in advance

--
____________________
Israel Fdez. Cabrera
***@gmail.com
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-***@openssl.org
Automated List Manager ***@openssl.org

Israel Fernández Cabrera

2005-10-15 22:19:01 UTC

Permalink

------=_Part_8894_14307937.1129414715235
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

That is a good question but I "guess" it is.. please see the attached
files for more information.
They are...

lsoutput.txt: I made ls in all the path to the certificates files
mysqld.log: Mysqld log file, interesting because it contains the
specific error, openssl .c files, line numbers (that by the way does
not match with the actual file, because of comment I guess), and
more..
strace.txt: a fragment of the mysqld strace output with the failing open ca=
ll...

I must thak you for the help and interest

best regards

Israel

--
____________________
Israel Fdez. Cabrera
***@gmail.com

------=_Part_8894_14307937.1129414715235
Content-Type: text/plain; name=lsoutput.txt; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="lsoutput.txt"

#>ls / | grep etc
drwxr-xr-x 83 root root 12288 Oct 15 16:50 etc

#>ls /etc | grep pki
drwxr-xr-x 7 root root 4096 Oct 14 17:51 pki

#>ls /etc/pki
total 104
drwxr-xr-x 3 root root 4096 Oct 14 21:46 CA
drwxr-xr-x 3 root root 4096 Oct 8 16:54 dovecot
-rwxr-xr-x 1 root root 1088 Oct 8 16:54 gencert.sh
-rwxr-xr-x 1 root root 1056 Oct 8 16:54 gencert.sh~
-rw-r--r-- 1 root root 236 Oct 8 16:54 index.txt
-rw-r--r-- 1 root root 21 Oct 8 16:54 index.txt.attr
-rw-r--r-- 1 root root 21 Oct 8 16:54 index.txt.attr.old
-rw-r--r-- 1 root root 118 Oct 8 16:54 index.txt.old
drwxr-xr-x 2 root root 4096 Oct 8 16:54 newcerts
drwxr-xr-x 2 root root 4096 Oct 8 16:54 rpm-gpg
-rw-r--r-- 1 root root 3 Oct 8 16:54 serial
-rw-r--r-- 1 root root 3 Oct 8 16:54 serial.old
drwxr-xr-x 5 root root 4096 Oct 14 17:51 tls

#>ls /etc/pki/tls
total 40
lrwxrwxrwx 1 root root 19 Oct 8 16:54 cert.pem -> certs/ca-bundle.crt
drwxr-xr-x 2 root root 4096 Oct 15 14:18 certs
drwxr-xr-x 2 root root 4096 Oct 8 16:54 misc
-r--r--r-- 1 root root 7998 Oct 14 17:59 openssl.cnf
drwxr-xr-x 2 root root 4096 Oct 8 16:54 private

#>ls /etc/pki/tls/certs
total 492
-rw-r--r-- 1 root root 427833 Oct 8 16:54 ca-bundle.crt
-rw-r--r-- 1 root root 3617 Oct 14 21:46 client-cert.pem
-rw-r--r-- 1 root mysql 887 Oct 8 16:54 client-key.pem
-rw-r--r-- 1 root mysql 769 Oct 8 16:54 client-req.pem
-rw-r--r-- 1 root root 610 Oct 8 16:54 make-dummy-cert
-rw-r--r-- 1 root root 2240 Oct 8 16:54 Makefile
-rw-r--r-- 1 root root 3617 Oct 14 21:46 server-cert.pem
-rw-r--r-- 1 root root 887 Oct 14 21:46 server-key.pem
-rw-r--r-- 1 root mysql 769 Oct 8 16:54 server-req.pem

------=_Part_8894_14307937.1129414715235
Content-Type: application/octet-stream; name=mysqld.log
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="mysqld.log"

051009 07:58:29 mysqld started
051009 7:58:30 InnoDB: Started; log sequence number 0 5774459
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 8:00:04 [Note] /usr/libexec/mysqld: Normal shutdown

051009 8:00:04 InnoDB: Starting shutdown...
051009 8:00:07 InnoDB: Shutdown completed; log sequence number 0 5774459
051009 8:00:07 [Note] /usr/libexec/mysqld: Shutdown complete

051009 08:00:07 mysqld ended

051009 08:00:57 mysqld started
051009 8:00:57 InnoDB: Started; log sequence number 0 5774459
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 8:01:13 [Note] /usr/libexec/mysqld: Normal shutdown

051009 8:01:13 InnoDB: Starting shutdown...
051009 8:01:16 InnoDB: Shutdown completed; log sequence number 0 5774459
051009 8:01:16 [Note] /usr/libexec/mysqld: Shutdown complete

051009 08:01:16 mysqld ended

051009 08:01:29 mysqld started
051009 8:01:30 InnoDB: Started; log sequence number 0 5774459
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 8:24:41 [Note] /usr/libexec/mysqld: Normal shutdown

051009 8:24:41 InnoDB: Starting shutdown...
051009 8:24:44 InnoDB: Shutdown completed; log sequence number 0 5774469
051009 8:24:44 [Note] /usr/libexec/mysqld: Shutdown complete

051009 08:24:44 mysqld ended

051009 08:24:55 mysqld started
051009 8:24:55 InnoDB: Started; log sequence number 0 5774469
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 8:25:33 [Note] /usr/libexec/mysqld: Normal shutdown

051009 8:25:33 InnoDB: Starting shutdown...
051009 8:25:36 InnoDB: Shutdown completed; log sequence number 0 5774469
051009 8:25:36 [Note] /usr/libexec/mysqld: Shutdown complete

051009 08:25:36 mysqld ended

051009 08:25:36 mysqld started
051009 8:25:37 InnoDB: Started; log sequence number 0 5774469
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
A mysqld process already exists at Sun Oct 9 11:04:59 CDT 2005
051009 11:05:38 [Note] /usr/libexec/mysqld: Normal shutdown

051009 11:05:39 InnoDB: Starting shutdown...
051009 11:05:41 InnoDB: Shutdown completed; log sequence number 0 5774469
051009 11:05:41 [Note] /usr/libexec/mysqld: Shutdown complete

051009 11:05:41 mysqld ended

051009 11:05:54 mysqld started
051009 11:05:55 InnoDB: Started; log sequence number 0 5774469
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
A mysqld process already exists at Sun Oct 9 11:06:35 CDT 2005
051009 13:02:46 [Note] /usr/libexec/mysqld: Normal shutdown

051009 13:02:46 InnoDB: Starting shutdown...
051009 13:02:49 InnoDB: Shutdown completed; log sequence number 0 6090268
051009 13:02:49 [Note] /usr/libexec/mysqld: Shutdown complete

051009 13:02:49 mysqld ended

051009 13:02:53 mysqld started
051009 13:02:54 InnoDB: Started; log sequence number 0 6090268
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
A mysqld process already exists at Sun Oct 9 14:01:46 CDT 2005
A mysqld process already exists at Sun Oct 9 15:06:32 CDT 2005
051009 15:06:40 [Note] /usr/libexec/mysqld: Normal shutdown

051009 15:06:40 InnoDB: Starting shutdown...
051009 15:06:43 InnoDB: Shutdown completed; log sequence number 0 6411998
051009 15:06:43 [Note] /usr/libexec/mysqld: Shutdown complete

051009 15:06:44 mysqld ended

051009 15:07:10 mysqld started
Error when connection to server using SSL:25701:error:0200100D:system library:fopen:Permission denied:bss_file.c:278:fopen('/etc/pki/tls/certs/server-cert.pem','r')
25701:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
25701:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib:ssl_rsa.c:515:
Unable to get certificate from '/etc/pki/tls/certs/server-cert.pem'
051009 15:07:12 InnoDB: Started; log sequence number 0 6411998
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 15:07:38 [Note] /usr/libexec/mysqld: Normal shutdown

051009 15:07:38 InnoDB: Starting shutdown...
051009 15:07:40 InnoDB: Shutdown completed; log sequence number 0 6411998
051009 15:07:40 [Note] /usr/libexec/mysqld: Shutdown complete

051009 15:40:40 mysqld started
051009 15:40:40 InnoDB: Started; log sequence number 0 6411998
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 15:45:33 [Note] /usr/libexec/mysqld: Normal shutdown

051009 15:45:33 InnoDB: Starting shutdown...
051009 15:45:37 InnoDB: Shutdown completed; log sequence number 0 6413215
051009 15:45:37 [Note] /usr/libexec/mysqld: Shutdown complete

051009 15:45:37 mysqld ended

051009 15:45:46 mysqld started
051009 15:45:46 InnoDB: Started; log sequence number 0 6413215
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 15:50:11 [Note] /usr/libexec/mysqld: Normal shutdown

051009 15:50:11 InnoDB: Starting shutdown...
051009 15:50:12 InnoDB: Shutdown completed; log sequence number 0 6413747
051009 15:50:12 [Note] /usr/libexec/mysqld: Shutdown complete

051009 15:50:13 mysqld ended

051009 15:50:30 mysqld started
051009 15:50:30 InnoDB: Started; log sequence number 0 6413747
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 15:51:27 [Note] /usr/libexec/mysqld: Normal shutdown

051009 15:51:27 InnoDB: Starting shutdown...
051009 15:51:30 InnoDB: Shutdown completed; log sequence number 0 6414801
051009 15:51:30 [Note] /usr/libexec/mysqld: Shutdown complete

051009 15:51:30 mysqld ended

051009 15:53:11 mysqld started
051009 15:53:12 InnoDB: Started; log sequence number 0 6414801
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051009 15:53:37 [Note] /usr/libexec/mysqld: Normal shutdown

051009 15:53:37 InnoDB: Starting shutdown...
051009 15:53:40 InnoDB: Shutdown completed; log sequence number 0 6415333
051009 15:53:40 [Note] /usr/libexec/mysqld: Shutdown complete

051009 15:53:40 mysqld ended

051009 16:06:26 mysqld started
051009 16:06:27 InnoDB: Started; log sequence number 0 6415333
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution

Status information:

Current dir: /var/lib/mysql/
Running threads: 0 Stack size: 196608
Current locks:
lock: 0xa438f10:

lock: 0xa4e8360:

lock: 0xa4e4ae8:

lock: 0xa4e3b88:

lock: 0xa4e2920:

lock: 0xa4e0228:

lock: 0xa4d26f0:

lock: 0xa4d25c0:

lock: 0xa4399f0:

lock: 0xa433530:

lock: 0xa4dce70:

lock: 0xa4dcdd8:

Key caches:
default
Buffer_size: 8388600
Block_size: 1024
Division_limit: 100
Age_limit: 300
blocks used: 7
not flushed: 0
w_requests: 0
writes: 0
r_requests: 26
reads: 7

handler status:
read_key: 120
read_next: 112
read_rnd 1
read_first: 38
write: 4
delete 0
update: 0

Table status:
Opened tables: 23
Open tables: 12
Open files: 0
Open streams: 0

Alarm status:
Active alarms: 0
Max used alarms: 2
Next alarm time: 0
051009 16:08:13 [Note] /usr/libexec/mysqld: Normal shutdown

051009 16:08:13 InnoDB: Starting shutdown...
051009 16:08:14 InnoDB: Shutdown completed; log sequence number 0 6415865
051009 16:08:14 [Note] /usr/libexec/mysqld: Shutdown complete

Memory status:
Non-mmapped space allocated from system: 6127616
Number of free chunks: 63
Number of fastbin blocks: 0
Number of mmapped regions: 12
Space in mmapped regions: 37273600
Maximum total allocated space: 0
Space available in freed fastbin blocks: 0
Total allocated space: 5836920
Total free space: 290696
Top-most, releasable space: 90072
Estimated memory (with thread stack): 43401216

051009 16:08:14 mysqld ended

051009 16:10:24 mysqld started
Error when connection to server using SSL:1904:error:0200100D:system library:fopen:Permission denied:bss_file.c:278:fopen('/etc/pki/tls/certs/server-cert.pem','r')
1904:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
1904:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib:ssl_rsa.c:515:
Unable to get certificate from '/etc/pki/tls/certs/server-cert.pem'
051009 16:10:26 InnoDB: Started; log sequence number 0 6415865
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051014 10:42:25 mysqld started
051014 10:42:29 InnoDB: Started; log sequence number 0 6415865
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051014 13:58:36 [Note] /usr/libexec/mysqld: Normal shutdown

051014 13:58:37 InnoDB: Starting shutdown...
051014 13:58:39 InnoDB: Shutdown completed; log sequence number 0 6481795
051014 13:58:39 [Note] /usr/libexec/mysqld: Shutdown complete

051014 13:58:40 mysqld ended

051014 13:58:43 mysqld started
051014 13:58:44 InnoDB: Started; log sequence number 0 6481795
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051014 14:01:15 [Note] /usr/libexec/mysqld: Normal shutdown

051014 14:01:15 InnoDB: Starting shutdown...
051014 14:01:17 InnoDB: Shutdown completed; log sequence number 0 6481831
051014 14:01:17 [Note] /usr/libexec/mysqld: Shutdown complete

051014 14:01:17 mysqld ended

051014 14:01:18 mysqld started
051014 14:01:18 InnoDB: Started; log sequence number 0 6481831
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
A mysqld process already exists at Fri Oct 14 17:20:44 CDT 2005
A mysqld process already exists at Fri Oct 14 17:54:02 CDT 2005
051014 17:57:25 [Note] /usr/libexec/mysqld: Normal shutdown

051014 17:57:25 InnoDB: Starting shutdown...
051014 17:57:29 InnoDB: Shutdown completed; log sequence number 0 7124617
051014 17:57:29 [Note] /usr/libexec/mysqld: Shutdown complete

A mysqld process already exists at Fri Oct 14 17:57:29 CDT 2005
051014 17:57:30 mysqld ended

051014 17:57:59 mysqld started
051014 17:58:00 InnoDB: Started; log sequence number 0 7124617
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051014 17:58:31 [Note] /usr/libexec/mysqld: Normal shutdown

051014 17:58:31 InnoDB: Starting shutdown...
051014 17:58:34 InnoDB: Shutdown completed; log sequence number 0 7125149
051014 17:58:34 [Note] /usr/libexec/mysqld: Shutdown complete

051014 17:58:34 mysqld ended

051014 18:00:22 mysqld started
051014 18:00:22 InnoDB: Started; log sequence number 0 7125149
/usr/libexec/mysqld: ready for connections.
Version: '4.1.11' socket: '/var/lib/mysql/mysql.sock' port: 3306 Source distribution
051015 16:52:29 [Note] /usr/libexec/mysqld: Normal shutdown

051015 16:52:29 InnoDB: Starting shutdown...
051015 16:52:35 InnoDB: Shutdown completed; log sequence number 0 7473283
051015 16:52:35 [Note] /usr/libexec/mysqld: Shutdown complete

A mysqld process already exists at Sat Oct 15 16:52:35 CDT 2005
051015 16:52:35 mysqld ended

051015 16:53:14 mysqld started
Error when connection to server using SSL:10976:error:0200100D:system library:fopen:Permission denied:bss_file.c:278:fopen('/etc/pki/tls/certs/server-cert.pem','r')
10976:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
10976:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib:ssl_rsa.c:515:
Unable to get certificate from '/etc/pki/tls/certs/server-cert.pem'
051015 17:15:04 mysqld ended

051015 17:15:05 mysqld started
Error when connection to server using SSL:11222:error:0200100D:system library:fopen:Permission denied:bss_file.c:278:fopen('/etc/pki/tls/certs/server-cert.pem','r')
11222:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
11222:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib:ssl_rsa.c:515:
Unable to get certificate from '/etc/pki/tls/certs/server-cert.pem'
051015 17:15:38 mysqld ended

A mysqld process already exists at Sat Oct 15 17:15:38 CDT 2005
051015 17:16:06 mysqld started
Error when connection to server using SSL:11562:error:0200100D:system library:fopen:Permission denied:bss_file.c:278:fopen('/etc/pki/tls/certs/server-cert.pem','r')
11562:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280:
11562:error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib:ssl_rsa.c:515:
Unable to get certificate from '/etc/pki/tls/certs/server-cert.pem'

------=_Part_8894_14307937.1129414715235
Content-Type: text/plain; name=strace.txt; charset=us-ascii
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment; filename="strace.txt"

open("/etc/pki/tls/certs/server-cert.pem", O_RDONLY) = -1 EACCES (Permission denied)
write(2, "Error when connection to server "..., 42) = 42
write(2, "1872:error:0200100D:system libra"..., 122) = 122
write(2, "1872:error:20074002:BIO routines"..., 70) = 70
write(2, "1872:error:140AD002:SSL routines"..., 88) = 88
write(2, "Unable to get certificate from \'"..., 68) = 68
open("/etc/pki/CA/cacert.pem", O_RDONLY) = -1 EACCES (Permission denied)
open("/etc/pki/tls/cert.pem", O_RDONLY) = -1 EACCES (Permission denied)
time([1129246383]) = 1129246383
open("/dev/urandom", O_RDONLY|O_NONBLOCK|O_NOCTTY) = -1 EACCES (Permission denied)
open("/dev/random", O_RDONLY|O_NONBLOCK|O_NOCTTY) = -1 EACCES (Permission denied)
open("/dev/srandom", O_RDONLY|O_NONBLOCK|O_NOCTTY) = -1 ENOENT (No such file or directory)
socket(PF_FILE, SOCK_STREAM, 0) = 3
connect(3, {sa_family=AF_FILE, path="/var/run/egd-pool"}, 19) = -1 ENOENT (No such file or directory)
close(3) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 3

------=_Part_8894_14307937.1129414715235--
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-***@openssl.org
Automated List Manager ***@openssl.org