Make keys world-readable, since they're not only used by root

2016-09-02 20:52:11 -07:00
parent d94c305fa8
commit 0cd3f3c5a1
1 changed files with 1 additions and 1 deletions
--- a/server/modules/certclient.py
+++ b/server/modules/certclient.py
@@ -116,7 +116,7 @@ SUBJECT="$(echo '%(subject)s' | sed s/SYSTEMID/$(hostname)/g)"

 if test ! -s "${KEY}"; then
  openssl ecparam -name secp384r1 -genkey | openssl ec -out "${KEY}"
-  chmod 0400 "${KEY}"
+  chmod 0444 "${KEY}"
 fi

 chvt 9