From: Simon Ruderich <simon@ruderich.org>
Date: Sat, 5 Dec 2015 13:52:40 +0000 (+0100)
Subject: use umask 077 to protect private keys
X-Git-Tag: v0.1.0~221^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F1%2Fhead;p=thirdparty%2Fdehydrated.git

use umask 077 to protect private keys
---

diff --git a/letsencrypt.sh b/letsencrypt.sh
index 8e6e231..51249f2 100755
--- a/letsencrypt.sh
+++ b/letsencrypt.sh
@@ -4,6 +4,9 @@ set -eu
 
 . ./config.sh
 
+umask 077 # paranoid umask, we're creating private keys
+
+
 urlbase64() {
   base64 -w 0 | sed -r 's/=*$//g' | tr '+/' '-_'
 }