diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/events/actions/phpki-fixownership smeserver-phpki-ng-0.3/root/etc/e-smith/events/actions/phpki-fixownership
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/events/actions/phpki-fixownership	2022-12-28 14:12:04.589000000 -0500
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/events/actions/phpki-fixownership	2022-12-28 14:39:53.565000000 -0500
@@ -3,6 +3,7 @@
 chown root:phpki /opt/phpki/html/config.php
 chown root:phpki /opt/phpki/html/openssl.cnf
 chown phpki:phpki -R /opt/phpki/phpki-store*
+chown root:phpki /opt/phpki/html/ca
 
 chmod +x /opt/phpki/html/
 chmod +x /opt/phpki/html/ca
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/php-fpm.d/www.conf/20pki smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/php-fpm.d/www.conf/20pki
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates/etc/php-fpm.d/www.conf/20pki	2022-12-28 14:12:04.596000000 -0500
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates/etc/php-fpm.d/www.conf/20pki	2022-12-28 14:59:59.653000000 -0500
@@ -9,7 +9,7 @@
   return  unless ($status eq 'enabled' && $version eq $PHP_VERSION);
   my $key                 = 'phpki';
   my $pool_name           = lc $key;
-  my $include_path = ".:/usr/share/pear-addons:/usr/share/pear:/usr/share/pear-data:/usr/share/php";
+  my $include_path = ".:/usr/share/pear-addons:/usr/share/pear:/usr/share/pear-data:/usr/share/php:/usr/sbin/:/usr/bin:/opt/phpki/html:/opt/phpki/html/include";
   my $open_basedir        = "/opt/phpki:/var/lib/php/phpki:/usr/sbin/openvpn:/usr/bin/which:/usr/bin/cat:/usr/bin/egrep:$include_path"; 
   my $disabled_functions  = 'show_source,dl,passthru'
 ;
@@ -59,6 +59,9 @@
 php_flag[register_globals] = off
 php_flag[register_long_arrays] = on
 
+; Needed so shell_exec does it right
+env[PATH] = $include_path
+
 _EOF
 
 
diff -Nur --no-dereference smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates.metadata/opt/phpki/html/config.php smeserver-phpki-ng-0.3/root/etc/e-smith/templates.metadata/opt/phpki/html/config.php
--- smeserver-phpki-ng-0.3.old/root/etc/e-smith/templates.metadata/opt/phpki/html/config.php	2022-12-28 14:12:04.609000000 -0500
+++ smeserver-phpki-ng-0.3/root/etc/e-smith/templates.metadata/opt/phpki/html/config.php	2022-12-28 14:15:06.085000000 -0500
@@ -1 +1,3 @@
 FILTER=sub { $_[0] =~ /^\s*$/ ? '' : $_[0] }
+GID='phpki'
+PERMS=0660