Solved. Indeed the permission of the upper directory should be set using chmod 755 *. Thank you both very much.
Re: ssl not working with Hypnotoad for 2.19 on Ubuntu 24.04 virtual server
by Qing Xia - Number of replies: 2
In reply to Qing Xia
Re: ssl not working with Hypnotoad for 2.19 on Ubuntu 24.04 virtual server
by Andras Balogh -I might be wrong, but maybe making the private certificate readable by everybody is not a good idea.
What I did to make it work was: chown www-data private
In reply to Andras Balogh
Re: ssl not working with Hypnotoad for 2.19 on Ubuntu 24.04 virtual server
by Danny Glin -I don't know best practices either, but it seems to me that having the file owned by the user running the web server might be a bad idea since it would then be writeable by that user, which introduces the possibility of overwriting the certificate from the web (though this would involve finding an exploit in the application that would allow saving to an arbitrary location).
If it is a dedicated WeBWorK server then having the certificate readable by everybody might not be a big deal since the only users on the server are system accounts and administrators.
If you wanted to get strict, I would think that the right approach would be to make the files readable by a group that the user running the web server belongs to.