gen-ec-cert: remove wx permissions from generated files
This commit is contained in:
parent
eb605487e5
commit
10d1e7d0d3
@ -31,9 +31,9 @@ if [ -f "$domain.key" ]; then
|
|||||||
printf "%s: key for %s already exists; reusing it.\n" \
|
printf "%s: key for %s already exists; reusing it.\n" \
|
||||||
"${0##*/}" "$domain" >&2
|
"${0##*/}" "$domain" >&2
|
||||||
else
|
else
|
||||||
(umask 077 &&
|
(umask 0377 &&
|
||||||
openssl ecparam -genkey -name "$curve" -out "$domain.key")
|
openssl ecparam -genkey -name "$curve" -out "$domain.key")
|
||||||
fi
|
fi
|
||||||
|
|
||||||
openssl req -new -x509 -days "$days" -subj "/CN=$domain" \
|
umask 0333 && openssl req -new -x509 -days "$days" -subj "/CN=$domain" \
|
||||||
-key "$domain.key" -out "$domain.pem"
|
-key "$domain.key" -out "$domain.pem"
|
||||||
|
Loading…
Reference in New Issue
Block a user