Ensure that server key is readable only by owner

This commit is contained in:
Alexander A. Afonyashin 2017-05-15 13:24:58 +03:00
parent 6c1176f853
commit bc7717ac26

View File

@ -4166,6 +4166,7 @@ _installcert() {
cp "$_real_key" "$_backup_path/key.bak" cp "$_real_key" "$_backup_path/key.bak"
fi fi
cat "$CERT_KEY_PATH" >"$_real_key" cat "$CERT_KEY_PATH" >"$_real_key"
chmod go-rwx "$_real_key"
fi fi
if [ "$_real_fullchain" ]; then if [ "$_real_fullchain" ]; then