Arch Linux User Repository

lfcr: This is due to pwrstatd trying to connect to iotapi.cyberpower.com but the included libraries lack the SSL_set_tlsext_host_name symbol, so it does not pass the SNI extension header during its TLS Client Hello, so Azure returns a generic *.azureedge.net certificate which is obviously different from what it expects.

You can ignore this error.

I still get the error: pwrstatd[755]: BIO_do_connect failed pwrstatd[755]: OpenSSL error: error:1416F086:SSLroutines:tls_process_server_certificate:certificate verify failed

(but no problem with -status)

My issue seems to have been fixed, thank you so much for your help!

Ah, it seems that the client "writes" to the socket /var/pwrstatd.ipc which is dynamically created by pwrstatd as root:root with 755 permissions.

Add the following snippet as an override using systemctl edit pwrstatd or wait a bit and let me send an update.

[Service]
Group=power
UMask=0002

I will send a fix, as I realize I might have inadvertently broken users setups. Edit: fix out

I tried adding execute permissions to /usr/bin/pwrstat for the power group and it allowed execution for pwrstat, but it wont allow execution for the pwrstat -status subcommand. I usually run the command via a script + systemd service/timer so that i can keep track of my power usage on my taskbar, so Im not sure if i can enter my sudo password for that use case. Is my usecase just not viable anymore?

GYDev, the PKGBUILD now follows CyberPower's install script, which restricts pwrstat to root-only execution. You can either use sudo pwrstat or change its permissions and allow execution by other users (sudo chmod 755 /usr/bin/pwrstat). Hope that helps.

After the recent update I am no longer able to run pwrstat -status despite my user being in the power group. I simply get an output of "Permission denied" and there arent any other logs to point me in the direction of what is going wrong, at least that ive seen. Do you have any ideas that could point me in the right direction?

Works for me, thanks.

Thanks @dbb. I decided to use the static libraries provided by cyberpower instead of having to installing old dependencies. It should work now (at least, it did on my install). Please let me know if you encounter any issues.

Immediate issue:

openssl-1.1 is still required for this to function, not openssl:

pwrstatd[1283]: /usr/sbin/pwrstatd: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory

Other issues:

I don't think usr/lib/systemd/system/pwrstatd.service should be in the backup array. Users shouldn't be modifying that file directly, and if they want to change its behavior they should be using systemd drop-in files either manually or via systemctl edit pwrstatd.service.

You can have architecture specific source and checksum arrays (i.e. source_x86_64, source_i686, sha256sums_x86_64, and sha256sums_i686), no need to explicitly check against $CARCH. I assume the i686 build is currently broken as is since the sha256sums array isn't modified.