From 835963fa6e13ff9a17da3bc1517a3bb827d17ab7 Mon Sep 17 00:00:00 2001
From: Georg Altmann <george@george-net.de>
Date: Sat, 15 Aug 2020 14:53:04 +0200
Subject: [PATCH] make alpn-validation certificates and keys group readable
 (closes #754, fixes #753)

---
 dehydrated | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dehydrated b/dehydrated
index 7705aec..097c911 100755
--- a/dehydrated
+++ b/dehydrated
@@ -1279,6 +1279,7 @@ generate_alpn_certificate() {
   SUBJ="/CN=${altname}/"
   [[ "${OSTYPE:0:5}" = "MINGW" ]] && SUBJ="/${SUBJ}"
   _openssl req -x509 -new -sha256 -nodes -newkey rsa:2048 -keyout "${alpncertdir}/${altname}.key.pem" -out "${alpncertdir}/${altname}.crt.pem" -subj "${SUBJ}" -extensions SAN -config "${tmp_openssl_cnf}"
+  chmod g+r "${alpncertdir}/${altname}.key.pem" "${alpncertdir}/${altname}.crt.pem"
   rm -f "${tmp_openssl_cnf}"
 }
 
-- 
2.47.3