ervin/acme.sh
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Set secure umask when generating key

Browse Source
This commit is contained in:
John W. O'Brien 2018-02-08 17:58:12 -05:00
parent 78915896d5
commit a8a5672c34
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
acme.sh
View File

@ -979,6 +979,8 @@ _createkey() {
fi fi
fi fi
(
umask 0077
if _isEccKey "$length"; then if _isEccKey "$length"; then
_debug "Using ec name: $eccname" _debug "Using ec name: $eccname"
${ACME_OPENSSL_BIN:-openssl} ecparam -name "$eccname" -genkey 2>/dev/null >"$f" ${ACME_OPENSSL_BIN:-openssl} ecparam -name "$eccname" -genkey 2>/dev/null >"$f"
@ -986,6 +988,7 @@ _createkey() {
_debug "Using RSA: $length" _debug "Using RSA: $length"
${ACME_OPENSSL_BIN:-openssl} genrsa "$length" 2>/dev/null >"$f" ${ACME_OPENSSL_BIN:-openssl} genrsa "$length" 2>/dev/null >"$f"
fi fi
)
if [ "$?" != "0" ]; then if [ "$?" != "0" ]; then
_err "Create key error." _err "Create key error."