Fix /etc/ssl/cert.pem not in open_basedir

elabftw · Jan 14, 2024 · cd3c348 · cd3c348
1 parent c5574ec
commit cd3c348
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,7 @@
 # 5.0.0
 
 * Change the default value of ``PHP_MAX_MEMORY`` from 256M (256 Mb) to 2G (2 Gb).
+* Fix `/etc/ssl/cert.pem` not in `open_basedir`
 
 # 4.7.0
 

diff --git a/src/init/prepare.sh b/src/init/prepare.sh
@@ -291,7 +291,8 @@ phpConf() {
     sed -i -e "s/%PHP_MAX_EXECUTION_TIME%/${php_max_execution_time}/" $f
 
     # production open_basedir conf value
-    open_basedir="/.dockerenv:/elabftw/:/tmp/:/usr/bin/unzip"
+    # /etc/ssl/cert.pem is for openssl and timestamp related functions
+    open_basedir="/.dockerenv:/elabftw/:/tmp/:/usr/bin/unzip:/etc/ssl/cert.pem"
     # DEV MODE
     if ($dev_mode); then
         # we don't want to use opcache as we want our changes to be immediately visible