[AMBARI-25413] Ambari is changing the truststore permission from 444/644 to 640.

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.4
• Fix Version/s: 2.8.0
• Component/s: ambari-server
• Labels: pull-request-available
• Assignee: Szilárd Antal
• Reporter: Ashish Bathla
• Created: 14/Nov/19 10:01
• Updated: 17/Nov/22 08:44
• Resolved: 14/Dec/19 10:08

Description

When running ambari-server setup-security and choosing '[1] Enable HTTPS for Ambari server.' we give the following information:
Do you want to disable HTTPS [y/n] ? n
SSL port [8080] ? 8080
Enter path to Certificate: <Certificate File>
Enter path to Private Key: <Key File>
Please enter password for Private Key: <empty>
Generating random password for HTTPS keystore...done.
Importing and saving Certificate...done.

Thereafter Unix permission of the systemwide Java truststore
/var/lib/ca-certificates/java-cacerts are changed from mode 444 to 640.
In consequence Applications do not start anymore because the truststore is not world readable. It's creating impact on applications which is run by other users.

Issue Links

• links to: GitHub PR#3521
• links to: GitHub Pull Request #3150