Home / server / Questions / 359829
In Process
Frank V
Asked: 2012-02-14 18:39:46 +0800 CST

CentOS6 - Apache2 working but when installing / enabling SSL, server won't start because of permissions error

  • 772

I'm attempting to install Apache with SSL on CentOS6 to use as a development server.

I've been following the directions posted here to get SSL working: http://wiki.centos.org/HowTos/Https (Note: Apache was working fine until I attempted to enable SSL.)

When I got to part about re-starting Apache, the server wouldn't start. I just get an error which follows:

[Mon Feb 13 18:31:36 2012] [error] (13)Permission denied: Init: Can't open 
 server certificate file /etc/pki/tls/certs/ca.crt

I saw that the reported certificate was owned by my user and my group, so I changed it to root:root but it made no difference. I'm not sure what else to try or what to look at. Thanks.

Note: My questions is similar to this but the error is different.

centos apache-2.2 ssl mod-ssl centos6

1 Answers

  1. So for anyone who doesn't understand what the answer actually is here:

    This is an selinux issue. Files can have different selinux "contexts" and a file with the wrong context will be unreadable by the httpd daemon even if the regular permissions are correct. In my case, the solution was to do the following:

    chcon --reference /file/with/correct/context /path/to/certificate/file

    Which will copy the context from the referenced file to the certificate. In case you don't have a file you can reference, the slightly trickier way (because of having to type it out) to set the correct context is:

    chcon unconfined_u:object_r:httpd_config_t:s0 /path/to/certificate/file
    • 11