INN commit: trunk (Makefile doc/pod/nnrpd.pod)

INN Commit rra at isc.org
Fri Aug 14 18:44:21 UTC 2009


    Date: Friday, August 14, 2009 @ 11:44:21
  Author: iulius
Revision: 8562

Add a restrictive umask before generating TLS certificates.

Modified:
  trunk/Makefile
  trunk/doc/pod/nnrpd.pod

-------------------+
 Makefile          |    1 +
 doc/pod/nnrpd.pod |    1 +
 2 files changed, 2 insertions(+)

Modified: Makefile
===================================================================
--- Makefile	2009-08-14 18:32:41 UTC (rev 8561)
+++ Makefile	2009-08-14 18:44:21 UTC (rev 8562)
@@ -129,6 +129,7 @@
 
 ##  Install a certificate for TLS/SSL support.
 cert:
+	umask 077 ; \
 	$(SSLBIN) req -new -x509 -nodes \
 	    -out $(D)$(PATHETC)/cert.pem -days 366 \
 	    -keyout $(D)$(PATHETC)/key.pem

Modified: doc/pod/nnrpd.pod
===================================================================
--- doc/pod/nnrpd.pod	2009-08-14 18:32:41 UTC (rev 8561)
+++ doc/pod/nnrpd.pod	2009-08-14 18:44:21 UTC (rev 8562)
@@ -180,6 +180,7 @@
 the default path by running C<make cert> after C<make install> when
 installing INN, or by running the following commands:
 
+    umask 077
     openssl req -new -x509 -nodes -out <pathetc>/cert.pem \
         -days 366 -keyout <pathetc>/key.pem
     chown news:news <pathetc>/cert.pem




More information about the inn-committers mailing list