From 10d1e7d0d31be14789c13cb2ccaeb60dd9dea375 Mon Sep 17 00:00:00 2001
From: Lucas <lucas@domain.invalid>
Date: Sat, 14 Mar 2020 13:36:41 +0000
Subject: [PATCH] gen-ec-cert: remove wx permissions from generated files

---
 utils/gen-ec-cert.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/utils/gen-ec-cert.sh b/utils/gen-ec-cert.sh
index 35cf09b..ee9ce7e 100644
--- a/utils/gen-ec-cert.sh
+++ b/utils/gen-ec-cert.sh
@@ -31,9 +31,9 @@ if [ -f "$domain.key" ]; then
 	printf "%s: key for %s already exists; reusing it.\n" \
 	    "${0##*/}" "$domain" >&2
 else
-	(umask 077 &&
+	(umask 0377 &&
 	    openssl ecparam -genkey -name "$curve" -out "$domain.key")
 fi
 
-openssl req -new -x509 -days "$days" -subj "/CN=$domain" \
+umask 0333 && openssl req -new -x509 -days "$days" -subj "/CN=$domain" \
     -key "$domain.key" -out "$domain.pem"