[asterisk-bugs] [JIRA] (ASTERISK-30278) http: Asterisk crashes on startup if TLS keys not readable

[N A (JIRA)]

N A created ASTERISK-30278:
------------------------------

             Summary: http: Asterisk crashes on startup if TLS keys not readable
                 Key: ASTERISK-30278
                 URL: https://issues.asterisk.org/jira/browse/ASTERISK-30278
             Project: Asterisk
          Issue Type: Bug
      Security Level: None
          Components: Core/HTTP
    Affects Versions: 20.0.0
         Environment: Debian 10
            Reporter: N A
            Severity: Major


Somehow this didn't happen with 20.0.0-rc2 but does with 20.0.0:

Issue cannot be worked around since http is required, so noload => http fails.

This should be handled more elegantly and should not prevent Asterisk from loading.

{noformat}
[2022-10-27 02:08:01]  Bound HTTP server 'http server' to address 0.0.0.0:8088
[2022-10-27 02:08:01] ERROR[13478]: tcptls.c:478 __ssl_setup: TLS/SSL error loading cert file. </etc/letsencrypt/live/REDACTED/fullchain.pem>
[2022-10-27 02:08:01] ERROR[13478]: tcptls.c:126 write_openssl_error_to_log: 139767752312704:error:0200100D:system library:fopen:Permission denied:../crypto/bio/bss_file.c:288:fopen('/etc/letsencrypt/live/REDACTED/fullchain.pem','r')
139767752312704:error:20074002:BIO routines:file_ctrl:system lib:../crypto/bio/bss_file.c:290:
139767752312704:error:140DC002:SSL routines:use_certificate_chain_file:system lib:../ssl/ssl_rsa.c:596:

WARNING: Freeing unregistered memory 0x555f8eb934e0 by tcptls.c write_openssl_error_to_log() line 129
Aborted
{noformat}



--
This message was sent by Atlassian JIRA
(v6.2#6252)