The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

unable to open private key file for reading

Discussion in 'Security' started by khalled, Jun 9, 2014.

  1. khalled

    khalled Active Member

    Joined:
    Jan 8, 2011
    Messages:
    31
    Likes Received:
    0
    Trophy Points:
    6
    i get the following error when run the command
    tail -500 /var/log/exim_mainlog

    errot
    PHP:
    2014-06-09 12:17:46 1Wu2GU-0003sJ-Ga unable to open private key file for reading: /var/cpanel/domain_keys/private/*****.net
    the qustion is
    is it safe to change permisson of this file from 0640 t 0644
     
  2. storminternet

    storminternet Well-Known Member

    Joined:
    Nov 2, 2011
    Messages:
    462
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    Root Administrator
    There should not be any problem for changing permission. You can safely change permission from 0640 to 0644
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Please ensure the following directory is configured with 0750 permissions:

    Code:
    /var/cpanel/domain_keys/private
    The files within this directory should have 0640 permissions.

    Thank you.
     
  4. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    940
    Likes Received:
    55
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
    This is odd. I've never messed with this dir on my own server, the directory is 0750 as it should be (set root:mail), but the files inside are root:root 644

    I think root:mail 640 would make more sense. It does seem that the 644 perms aren't a big deal though, because the 0750 on the dir prevents unprivileged users from reading the files anyway.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  6. quizknows

    quizknows Well-Known Member

    Joined:
    Oct 20, 2009
    Messages:
    940
    Likes Received:
    55
    Trophy Points:
    28
    cPanel Access Level:
    DataCenter Provider
    They're not like that on any servers I'm checking. They're all root:root 644. Checking on up-to-date 11.42 as well as a 11.38.2.23 box.
     
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    This was addressed with internal case number 81441 in cPanel version 11.42:

    Fixed case 81441: Exim unable to open DKIM private keys for reading.

    Removing and re-adding the records should result in updated permissions on these files. Or, you could manually update the permissions/ownership values.

    Thank you.
     
Loading...

Share This Page