[Bug 258827] security/step-certificates: step-ca fails to start in the init process included SSH certs

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 04 Oct 2021 10:00:07 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=258827

--- Comment #3 from Adam Jimerson <vendion@gmail.com> ---
(In reply to Markus Wipp from comment #1)

The first issue I reported is odd because it works correctly directly after it
was installed. Here's the steps I basically did which triggered it:

1. pkg install step-certificates
2. sysrc step_ca_enable 'YES'
3. service step-ca start
4. (follow the interactive setup process)
5. rm -rf /usr/local/etc/step
6. service step-ca stop
7. vim /usr/local/etc/rc.d/step-ca (add the --ssh arg)
8. service step-ca start
9. (follow the interactive setup process)
10. Notice that /usr/local/etc/step has wrong perms which cases step-ca no
fail.

Any attempts to run step 8 and 9 always fails even with reverting
/usr/local/etc/rc.d/step-ca to the way it was. The only fix I found was to
remove the step-certificates package and it's deps and reinstalling it. Not
sure why that fixes it vs just reverting the init script but it did.

-- 
You are receiving this mail because:
You are the assignee for the bug.