generated key file must not be world readable

andreaswolf / ansible-role-letsencrypt

Ansible role for generating certificates with acme-tiny via Let’s encrypt

46 stars 20 forks source link

generated key file must not be world readable #3

Closed nilsglow closed 8 years ago

nilsglow commented 8 years ago

The key that gets created at {{ keypath }} has mode 0644.

andreaswolf commented 8 years ago

I know about that and I’m currently fixing it :) Default will be secure (root/root/0600) and you can specify your own permissions via the certificate configuration.