Service provider unable to load private key from file

[Cantor, Scott]

On 9/16/13 1:15 PM, "Brian Reindel" <brian at reindel.com> wrote:

>-rw-r--r--. 1 root  root   1062 Sep 16 11:20 sp-cert.pem
>-rw-------. 1 shibd shibd  1704 Sep 16 11:20 sp-key.pem
>
>That gives me the same error.

About the only other common case is if the key is encrypted and needs a
password. keygen doesn't generate keys encrypted though.

> While this:
>
>-rw-r--r--. 1 root  root   1062 Sep 16 11:20 sp-cert.pem
>-rw-r--r--. 1 shibd shibd  1704 Sep 16 11:20 sp-key.pem
>
>Gives "Segmentation fault (core dumped)" and the service fails to
>start.

Without a stack trace, there's no way for me to diagnose a core dump, but
it seems like something is seriously not right about that server.
Sometimes even strace will show something if it's crashing in a system
call while starting up.

>I'm not sure why giving more permissions would return a worse
>result, but that is what is happening. One the owner has read on the
>key it fails with that.

That's just not sensible, as you said, though the key certainly shouldn't
be world readable. But nothing I wrote cares if it is. Something is deeply
wrong.

-- Scott