packages icon indicating copy to clipboard operation
packages copied to clipboard

<acme> package save certificate private key as world-readable

Open jasworks opened this issue 2 years ago • 2 comments

Maintainer: @\tohojo (find it by checking history of the package Makefile) Environment: All

Description:

It is very obvious, when ACME renewed certificate, the private key was set world readable, best to put some permission setting there to make it only world-readable.

It shouldn’t break uhttpd anyway because it is running as root.

jasworks avatar Mar 30 '23 10:03 jasworks

@tohojo

stokito avatar May 25 '24 14:05 stokito

Hmm, what version does this happen with? acme.sh already has code that sets proper permissions (0600 on the key file)...

tohojo avatar May 28 '24 14:05 tohojo