# HG changeset patch
# User Kim Alvefur <zash@zash.se>
# Date 1450868823 -3600
# Node ID b5bc9f77f096d9e6a195b1d9712a60098e7a25c6
# Parent  b2d160baa95726dd8ec35e4e2b272ec4621d316c
certs/Makefile: Run key generation with a stricter umask (fixes a race condition)

diff -r b2d160baa957 -r b5bc9f77f096 certs/Makefile
--- a/certs/Makefile	Tue Dec 22 14:15:09 2015 +0000
+++ b/certs/Makefile	Wed Dec 23 12:07:03 2015 +0100
@@ -26,5 +26,5 @@
 	sed 's,example\.com,$*,g' openssl.cnf > $@
 
 %.key:
-	openssl genrsa $(keysize) > $@
-	@chmod 400 $@
+	umask 0077 && openssl genrsa -out $@ $(keysize)
+	@chmod 400 $@ -c