Bootstrap overwrite my certs

Matthew Newton mcn at freeradius.org
Tue Apr 30 23:27:27 CEST 2019


On Tue, 2019-04-30 at 14:17 -0700, Rafael Leiva-Ochoa wrote:
>      I recently upgraded to 3.0.19-1

>From where?

> After a lot of digging, I found that a "bootstrap" script on the
> /etc/raddb/certs/ directory was being called on
> the /usr/lib/systemd/system/radiusd.service. This script overwrote my
> current certificate files. I had to comment out the
> ExecStartPre=/bin/sh
> /etc/raddb/certs/bootstrap to fix the problem. I am not sure if
> anyone else
> encountered this problem before. Is this being addressed on future
> releases?

That's not in the official release.

https://github.com/FreeRADIUS/freeradius-server/blob/v3.0.x/redhat/radiusd.service

Calling bootstrap in the service file is wrong. It should be done
manually, or upon a clean install by the package manager.

-- 
Matthew




More information about the Freeradius-Users mailing list