is the file /tmp/openvpn/cert.pem accessible to the user under which openvpn is running ('nobody' ?) also, is the directory /tmp/openvpn accessible to this user?
Thanks - interesting idea.
This a somewhat extreme case as I am running within a very constrained environment (on a router, dd-wrt build). As such openvpn is actually executed from the root process...
The config file are all having the same authorization:
root@myrouter:/tmp/openvpn# ls -l
-rw------- 1 root root 1284 Jun 27 00:00 ca.crt
drwx------ 2 root root 0 Jun 24 13:43 ccd
-rw------- 1 root root 1379 Jun 27 00:00 cert.pem
-rw------- 1 root root 245 Jun 27 00:00 dh.pem
-rw------- 1 root root 0 Jun 24 13:43 ip-pool
-rw------- 1 root root 886 Jun 27 00:00 key.pem
-rw------- 1 root root 636 Jun 27 00:00 openvpn.conf
-rwx------ 1 root root 10 Jun 27 00:00 route-down.sh
-rwx------ 1 root root 34 Jun 27 00:00 route-up.sh
so I'm pretty sure cert.pem is readable:
root@myrouter:/tmp/openvpn# tail cert.pem
(...)
rBw8EFTL+CZjKASYjx19T7d55ihove68N9pFntsd1+djordf12oXThtmMDrQ48EF
h36JsNNLj2xXJs/6G6ywQp7fdf+FrrfJe8lvOYff4IdNCOADOfMpg/Sxvs9k/Xvd
d6lbLVk3FrwWOxec4Y/VySlAwQiYunurlHVgc2KnbJptLcmD2Jf5olHGPgOBIGGP
biPUJ688nS1tJCtiYgGZP4U=
-----END CERTIFICATE-----
Any other idea / pointer most welcome
