prosody
b5bc9f77f096

Find changesets by keywords by author, files, the commit message, revision number or hash, or revset expression.

Software / code / prosody

Changeset

7030:b5bc9f77f096

certs/Makefile: Run key generation with a stricter umask (fixes a race condition)
author Kim Alvefur <zash@zash.se>
date Wed, 23 Dec 2015 12:07:03 +0100
parents 7029:b2d160baa957
children 7031:89221daefae9 7051:ecfa474ff570
files certs/Makefile
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/certs/Makefile	Tue Dec 22 14:15:09 2015 +0000
+++ b/certs/Makefile	Wed Dec 23 12:07:03 2015 +0100
@@ -26,5 +26,5 @@
 	sed 's,example\.com,$*,g' openssl.cnf > $@
 
 %.key:
-	openssl genrsa $(keysize) > $@
-	@chmod 400 $@
+	umask 0077 && openssl genrsa -out $@ $(keysize)
+	@chmod 400 $@ -c