我如何访问我的TLS / HTTPS密钥以启动ListenAndServeTLS？

Question

My server uses Let's Encrypt to get its TLS certificate to serve over HTTPS.

I'm electing to use the standard net/http package over Apache or nginx, so I used the webroot installation method, and it placed the cert files in /etc/letsencrypt/live/mysite.

The issue is that the live directory is only accessible by the root user. My golang program requires the certs in this directory to function and serve over HTTPS.

However for obvious reasons I'm not running my program as the root user.

So that leads me to wonder: how do I access these files without having to insecurely run my web server as root permanently?

Answer 1

You have few options:

• sudo chown -R your-user /etc/letsencrypt/live/mysite

Or

• sudo cp -a /etc/letsencrypt/live/mysite ./ssl/ && sudo chown -R your-user ./ssl/

Or

• Use a container for your app and copy your app and the certs to it, and since it will be running as root inside the container, it won't matter.