Permission denied to cacerts file - SSL

Question

I have installed a Red Hat 6.8 machine, on which I have installed a certificate on the default keystore 'cacerts' successfully. When trying to invoke a software which is using SSL and is trying to access the keystore 'cacerts' (invoked as applicative user - not root), I receive the following error message: 'java.io.FileNotFoundException: Permission denied'.

From my research online, any user should have access to the 'cacerts' keystore (although the owner of the file is 'root').

Solution 1

Use sudo. That prevents permission escalation

Solution 2

Increasing file permission to 777 solved the issue.

Comments

[Kyle H]

What are the permissions on the directory and file? Owned by root:root and with rwxr-xr-x permissions on the directory should allow the user to access the directory contents. Then it depends on the file permissions and selinux. What distro, do you have selinux enforcing? If so, what is the selinux context shown by 'ls -lZ <filename>'

[Guy Tabak]

Group and owner is root (root:root), folder permission is drwxr-xr-x (only read permission should be needed).

[Guy Tabak]

* Increasing file permission to 777 solved the issue. Thanks for your help.

[Odyssee]

Never, I repeat, NEVER set your file permissions to 777. This introduces a lot of security risks. You are basically opening up the file to be modified and executed by anyone who can access the server.