trustClientCert throws System.UnauthorizedAccessException: Access to the path

45 views
Skip to first unread message

vis...@bitloka.com

unread,
May 28, 2018, 7:12:55 AM5/28/18
to RavenDB - 2nd generation document database
ravendb> generateClientCert some_cert.pfx /home/some_user some_password works fine and generates the file etc.

Now if we do 

ravendb> trustClientCert some_cert.pfx /home/some_user some_password  fails giving the error 
ERROR: Failed to load the provided certificate. Please check the path and password.System.UnauthorizedAccessException: Access to the path '/home/some_user/' is denied. ---> System.IO.IOException: Permission denied

It's able to generate and write the file but reading is an issue? The code in point seems to be https://github.com/ravendb/ravendb/blob/v4.0/src/Raven.Server/Utils/Cli/RavenCli.cs (~ line 519)

How to fix this?

Oren Eini (Ayende Rahien)

unread,
May 28, 2018, 7:27:53 AM5/28/18
to ravendb
trustClientCert expects a full path to the certificate pfx file.
Note that generateClientCert generates a ZIP file, instead.
Unzip it and then pass the full file path to the pfx there.

Hibernating Rhinos Ltd  

Oren Eini l CEO Mobile: + 972-52-548-6969

Office: +972-4-622-7811 l Fax: +972-153-4-622-7811

 


--
You received this message because you are subscribed to the Google Groups "RavenDB - 2nd generation document database" group.
To unsubscribe from this group and stop receiving emails from it, send an email to ravendb+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Vishal Honnatti

unread,
May 28, 2018, 8:12:12 AM5/28/18
to rav...@googlegroups.com
So the first parameter (name) can be anything? 

--
You received this message because you are subscribed to a topic in the Google Groups "RavenDB - 2nd generation document database" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/ravendb/7151Bkyam04/unsubscribe.
To unsubscribe from this group and all its topics, send an email to ravendb+unsubscribe@googlegroups.com.

For more options, visit https://groups.google.com/d/optout.



--
Vishal Honnatti

Bitloka Solutions Pvt Ltd

(Makers of CampusTrack)


Oren Eini (Ayende Rahien)

unread,
May 28, 2018, 8:27:30 AM5/28/18
to ravendb
It's just the friendly name for the cert, yes

Vishal Honnatti

unread,
May 28, 2018, 8:34:53 AM5/28/18
to rav...@googlegroups.com
Ah OK. That explains it. 

Thanks for the inputs... 
Reply all
Reply to author
Forward
0 new messages