getssl icon indicating copy to clipboard operation
getssl copied to clipboard

Security: Permissions on files containing keys are too open

Open tlhackque opened this issue 8 years ago • 0 comments

When getssl creates a file containing both the private key and one or more certificates (DOMAIN_PEM_LOCATION, DOMAIN_KEY_CERT_LOCATION), the new file has the default permissions, not the restrictive permissions used to create the .key file. This can result in the combined file exposing the private key.

The pull request from my branch (pending since may) has a fix for this.

tlhackque avatar Aug 05 '17 14:08 tlhackque