Comment on coturn can't get access to certificates
Oisteink@feddit.nl 3 months agoeither create a cert group and give that group permission to the certs, or add a handler to distribute the cert+key on renew to your service’s folder, and change owner/group to whats relevant to the service
someoneFromInternet@lemmy.ml 3 months ago
-rw-rwxr-- 1 root certgroup 2864 Jul 14 01:07 fullchain1.pem -rw-rwxr-- 1 root certgroup 241 Jul 14 01:07 privkey1.pem What if I have such permissions, but coturn still can’t access to files?
hendrik@palaver.p3x.de 3 months ago
First of all you'd need to make sure that coturn is in the "certgroup" group. Or it won't help.
Secondly, those are just the two files. "certgroup" might still be unable to open them if the directory permissions don't allow opening the directory in the first place. And we can't tell from just the two lines. Make sure all the parent directories also allow traversing to that location. "rX" are required to read and open a directory.
someoneFromInternet@lemmy.ml 3 months ago
What if I created new directory and copy one of certificate there(manually, using nano), then I gave all permissions to folder and this certificate, but coturn still can’t access this cert?
hendrik@palaver.p3x.de 3 months ago
Same things would apply as I lined out earlier. You'd also need to pay attention to the parent directory of that directory (and maybe parents of those). And check if coturn is actually running as that user and/or group.
You might just (for testing) grant all permissions on the files. Put them into a directory that you're 100% sure coturn can access. Like one of Coturn's own directories. And then chmod 666 both files and give them the same user and group as coturn's own config file has. If that doesn't work, it's not the permissions.
And read the actual error message again. Make sure it says "permission denied". Make sure the filename in the error message is the exact filename. To rule out other errors or a typo.