ervin/acme.sh
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Set secure umask when generating key

Browse Source
This commit is contained in:
John W. O'Brien 2018-02-08 17:58:12 -05:00
parent 78915896d5
commit a8a5672c34
1 changed files with 10 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
acme.sh
View File

@ -979,13 +979,16 @@ _createkey() {
fi fi
fi fi
if _isEccKey "$length"; then (
_debug "Using ec name: $eccname" umask 0077
${ACME_OPENSSL_BIN:-openssl} ecparam -name "$eccname" -genkey 2>/dev/null >"$f" if _isEccKey "$length"; then
else _debug "Using ec name: $eccname"
_debug "Using RSA: $length" ${ACME_OPENSSL_BIN:-openssl} ecparam -name "$eccname" -genkey 2>/dev/null >"$f"
${ACME_OPENSSL_BIN:-openssl} genrsa "$length" 2>/dev/null >"$f" else
fi _debug "Using RSA: $length"
${ACME_OPENSSL_BIN:-openssl} genrsa "$length" 2>/dev/null >"$f"
fi
)
if [ "$?" != "0" ]; then if [ "$?" != "0" ]; then
_err "Create key error." _err "Create key error."