INN commit: trunk (Makefile doc/pod/nnrpd.pod)
INN Commit
rra at isc.org
Fri Aug 14 18:44:21 UTC 2009
Date: Friday, August 14, 2009 @ 11:44:21
Author: iulius
Revision: 8562
Add a restrictive umask before generating TLS certificates.
Modified:
trunk/Makefile
trunk/doc/pod/nnrpd.pod
-------------------+
Makefile | 1 +
doc/pod/nnrpd.pod | 1 +
2 files changed, 2 insertions(+)
Modified: Makefile
===================================================================
--- Makefile 2009-08-14 18:32:41 UTC (rev 8561)
+++ Makefile 2009-08-14 18:44:21 UTC (rev 8562)
@@ -129,6 +129,7 @@
## Install a certificate for TLS/SSL support.
cert:
+ umask 077 ; \
$(SSLBIN) req -new -x509 -nodes \
-out $(D)$(PATHETC)/cert.pem -days 366 \
-keyout $(D)$(PATHETC)/key.pem
Modified: doc/pod/nnrpd.pod
===================================================================
--- doc/pod/nnrpd.pod 2009-08-14 18:32:41 UTC (rev 8561)
+++ doc/pod/nnrpd.pod 2009-08-14 18:44:21 UTC (rev 8562)
@@ -180,6 +180,7 @@
the default path by running C<make cert> after C<make install> when
installing INN, or by running the following commands:
+ umask 077
openssl req -new -x509 -nodes -out <pathetc>/cert.pem \
-days 366 -keyout <pathetc>/key.pem
chown news:news <pathetc>/cert.pem
More information about the inn-committers
mailing list