Wrong permission advise for SSL server pem file

[Melroy van den Berg]

Hi,

When restart the monit deamon I got the following error:

    monit[]: Starting daemon monitor: monitThe SSL server PEM file '/xxx/xxx/server.pem' must have permissions no more than ...r-- (0644).
    monit[]: /etc/monit/monitrc:137: SSL server PEM file permissions check failed 'allow'
    monit[]: failed!

Nevertheless, the permissions where exactly 644, still I got this problem. The only solution was to set the file permissions to 700.

So please, either change the advise from 644 to 700, or change the sanity check in the code.

Thanks!

Kind regards, Melroy van den Berg

[Tildeslash]

Hi,

thanks for report, unfortunately i'm not able to reproduce the problem ... setting permission of the PEM file to 0644 throws the following error:

The SSL server PEM file '/home/monit/monit.pem' must have permissions no more than -rwx------ (0700); right now permissions are -rw-r--r-- (0644).
/home/monit/.monitrc_ssl:7: SSL server PEM file permissions check failed 'set'

Please upgrade monit.

[Tildeslash]

Yet one note ... where from was the the error message snip? It seems it was truncated, as the full error message is more verbose and includes the required permissions (see the example in our previous post).

[Tildeslash]

fix Issue #228: The file permission hint was too long (may get trucanted in syslog)

→ <<cset 54aa01f228d6>>

[Tildeslash]

Removing version: 5.9 (automated comment)