Bug 1658825 - systemd-journal-remote configs define certificate and key paths that do not exist
Summary: systemd-journal-remote configs define certificate and key paths that do not e...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 8
Classification: Red Hat
Component: systemd
Version: 8.0
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: 8.0
Assignee: systemd-maint
QA Contact: qe-baseos-daemons
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-12-12 23:08 UTC by Scott Poore
Modified: 2018-12-14 07:43 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-12-14 07:43:40 UTC
Type: Bug
Target Upstream Version:


Attachments (Terms of Use)

Description Scott Poore 2018-12-12 23:08:19 UTC
Description of problem:

The /etc/systemd/journal-{remote,upload}.conf files (an the services) point to default paths that do not seem to exist on my test hosts:

# ls -ld /etc/ssl/private/
ls: cannot access '/etc/ssl/private/': No such file or directory


# ls -ld /etc/ssl/ca
ls: cannot access '/etc/ssl/ca': No such file or directory

These are defined as the locations like this:

# cat /etc/systemd/journal-remote.conf 
[Remote]
# Seal=false
# SplitMode=host
# ServerKeyFile=/etc/ssl/private/journal-remote.pem
# ServerCertificateFile=/etc/ssl/certs/journal-remote.pem
# TrustedCertificateFile=/etc/ssl/ca/trusted.pem

Version-Release number of selected component (if applicable):
systemd-journal-remote-239-8.el8.x86_64

How reproducible:
always

Steps to Reproduce:
1.  dnf -y install systemd-journal-remote
2.  if you try to install keys into the default locations, you must create the missing dirs.


Actual results:
dirs do not exist

Expected results:
dirs already exist or systemd-journal-remote points to new standard locations that do exist?

Additional info:
Or is this maybe a documentation issue?

Comment 1 Jan Synacek 2018-12-14 07:43:40 UTC
They are just examples. You can put the certificates wherever you like and then, of course, you have to adjust the configuration.


Note You need to log in before you can comment on or make changes to this bug.