Arch Linux

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,087

[Solved] openssl 3.6.3-1 /etc/ssl/private 755 , 700 on package

[2026-06-10T10:55:41+0200] [ALPM] warning: directory permissions differ on /etc/ssl/private/, filesystem: 755  package: 700
[2026-06-10T10:55:41+0200] [ALPM] upgraded openssl (3.6.2-2 -> 3.6.3-1)

All folders in /etc/ssl/ have permission 755, folder /etc/ssl/private is empty .

$ su -c "pacman -Qikk openssl"
Password: 
Name            : openssl
Version         : 3.6.3-1
Description     : The Open Source toolkit for cryptography and Transport Layer Security
Architecture    : x86_64
URL             : https://www.openssl.org
Licenses        : Apache-2.0
Groups          : None
Provides        : libcrypto.so=3-64  libssl.so=3-64
Depends On      : brotli  glibc  zlib  zstd
Optional Deps   : ca-certificates [installed]
                  perl [installed]
Required By     : clamav  coreutils  cryptsetup  curl  dhcpcd  falkon  git  gnustep-base  grpc  gst-plugins-bad  karchive  kmod
                  krb5  ldns  libarchive  libevent  libimobiledevice  libngtcp2  libnvme  libsasl  libshout  libssh  libssh2
                  libzip  linux-headers  live-media  lynx  neon  ntp  openssh  opusfile  pacman  python  qpdf  qt6-base  rsync
                  s-nail  srt  sudo  syslog-ng  systemd  tpm2-tss  unshield  vsftpd  wpa_supplicant  xmlsec
Optional For    : qca-qt6  refind
Conflicts With  : None
Replaces        : openssl-perl  openssl-doc
Installed Size  : 12.24 MiB
Packager        : Pierre Schmitz <pierre@archlinux.org>
Build Date      : di 09 jun 2026 18:12:05 CEST
Install Date    : wo 10 jun 2026 10:55:41 CEST
Install Reason  : Installed as a dependency for another package
Install Script  : No
Validated By    : Signature

warning: openssl: /etc/ssl/private (Permissions mismatch)
openssl: 6748 total files, 1 altered file
$ 

archlinux bugtacker has no reports for openssl, no changes in PKGBUILD that could cause this.
Should I change the permissions or file a bug ?

Last edited by Lone_Wolf (2026-06-10 12:08:35)

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

WorMzy

Administrator

From: Scotland

Registered: 2010-06-16

Posts: 13,548

Website

Re: [Solved] openssl 3.6.3-1 /etc/ssl/private 755 , 700 on package

It was fixed in https://gitlab.archlinux.org/archlinux/ … bfd533005d (see also https://gitlab.archlinux.org/archlinux/ … rk_items/1)

---

Sakura:-
Mobo: MSI MAG X570S TORPEDO MAX // Processor: AMD Ryzen 9 5950X @4.9GHz // GFX: AMD Radeon RX 5700 XT // RAM: 32GB (4x 8GB) Corsair DDR4 (@ 3000MHz) // Storage: 1x 3TB HDD, 6x 1TB SSD, 2x 120GB SSD, 1x 275GB M2 SSD

Making lemonade from lemons since 2015.

Lone_Wolf

Administrator

From: Netherlands, Europe

Registered: 2005-10-04

Posts: 15,087

Re: [Solved] openssl 3.6.3-1 /etc/ssl/private 755 , 700 on package

Thanks, folder permissions changed.
Marking as [Solved]

---

Disliking systemd intensely, but not satisfied with alternatives so focusing on taming systemd.

clean chroot building not flexible enough ?
Try clean chroot manager by graysky

darose

Member

Registered: 2004-04-13

Posts: 162

Re: [Solved] openssl 3.6.3-1 /etc/ssl/private 755 , 700 on package

After making this change on my server, it blocks exim from accessing its TLS cert:

2026-06-15 20:55:58 TLS error on connection from router [192.168.10.1] (SSL_CTX_use_PrivateKey_file file=/etc/ssl/private/exim.pem): error:8000000D:system library::Permission denied

Is there a fix/workaround for this?

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 76,009

Re: [Solved] openssl 3.6.3-1 /etc/ssl/private 755 , 700 on package

According to https://www.exim.org/exim-html-current/ … _file.html the default for tls_privatekey seems to be /etc/ssl/exim.pem ?

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc