getssl
getssl copied to clipboard
Security: Permissions on files containing keys are too open
When getssl creates a file containing both the private key and one or more certificates (DOMAIN_PEM_LOCATION, DOMAIN_KEY_CERT_LOCATION), the new file has the default permissions, not the restrictive permissions used to create the .key file. This can result in the combined file exposing the private key.
The pull request from my branch (pending since may) has a fix for this.