From: Georg Altmann <george@george-net.de>
Date: Sat, 15 Aug 2020 12:53:04 +0000 (+0200)
Subject: make alpn-validation certificates and keys group readable (closes #754, fixes #753)
X-Git-Tag: v0.7.0~9
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=835963fa6e13ff9a17da3bc1517a3bb827d17ab7;p=thirdparty%2Fdehydrated.git

make alpn-validation certificates and keys group readable (closes #754, fixes #753)
---

diff --git a/dehydrated b/dehydrated
index 7705aec..097c911 100755
--- a/dehydrated
+++ b/dehydrated
@@ -1279,6 +1279,7 @@ generate_alpn_certificate() {
   SUBJ="/CN=${altname}/"
   [[ "${OSTYPE:0:5}" = "MINGW" ]] && SUBJ="/${SUBJ}"
   _openssl req -x509 -new -sha256 -nodes -newkey rsa:2048 -keyout "${alpncertdir}/${altname}.key.pem" -out "${alpncertdir}/${altname}.crt.pem" -subj "${SUBJ}" -extensions SAN -config "${tmp_openssl_cnf}"
+  chmod g+r "${alpncertdir}/${altname}.key.pem" "${alpncertdir}/${altname}.crt.pem"
   rm -f "${tmp_openssl_cnf}"
 }