From: Tomas Mraz <tomas@openssl.org>
Date: Mon, 15 Dec 2025 11:19:30 +0000 (+0100)
Subject: apps/req.c: Always set permissions for private key output
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=495cf0efe6c536e60bf63f666c684e43675b99fd;p=thirdparty%2Fopenssl.git

apps/req.c: Always set permissions for private key output

The key output will be always private.

Reported with a proposed fix by Stanislav Fort (Aisle Research).

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/29397)
---

diff --git a/apps/req.c b/apps/req.c
index f95fa013bd9..3171342d853 100644
--- a/apps/req.c
+++ b/apps/req.c
@@ -719,7 +719,7 @@ int req_main(int argc, char **argv)
             else
                 BIO_printf(bio_err, "'%s'\n", keyout);
         }
-        out = bio_open_owner(keyout, outformat, newreq);
+        out = bio_open_owner(keyout, outformat, 1);
         if (out == NULL)
             goto end;