From 23b461aa4500e0c5f20be11e99191c8e3f0bddb3 Mon Sep 17 00:00:00 2001 From: dece Date: Tue, 1 Jun 2021 18:42:52 +0200 Subject: [PATCH] identity: sane chmod for cert and key files --- bebop/identity.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/bebop/identity.py b/bebop/identity.py index 4b379ba..da88c85 100644 --- a/bebop/identity.py +++ b/bebop/identity.py @@ -109,6 +109,9 @@ def create_certificate(url: str, common_name: str, gen_command: list): except subprocess.CalledProcessError as exc: error = "Could not create certificate: " + str(exc) raise ClientCertificateException(error) + + cert_path.chmod(0o644) + key_path.chmod(0o600) return mangled_name