square / certstrap

Tools to bootstrap CAs, certificate requests, and signed certificates.
Apache License 2.0
2.31k stars 207 forks source link

Get CA certificate error: permissions too lax for cert.crt: required no more than -r--r--r--, found -r-xr-xr-x #180

Open fsdrw08 opened 1 year ago

fsdrw08 commented 1 year ago

Got permission error when I run certstrap in docker, with sign action

podman run --rm -v ./out:/out -v ./csr:/csr docker.io/squareup/certstrap sign `
    --passphrase "changeit" `
    --expires "3 year" `
    --csr /csr/Sololab_Org_v1_ICA1_v1.csr `
    --cert /out/Intermediate_CA1_v1.crt `
    --intermediate `
    --CA "Sololab Root" `
    "Intermediate CA1 v1"

Got this error

Get CA certificate error: permissions too lax for /out/Sololab_Root.crt: required no more than -r--r--r--, found -r-xr-xr-x
AndyHowarthSbuffles commented 1 year ago

Got permission error when I run certstrap in docker, with sign action


podman run --rm -v ./out:/out -v ./csr:/csr docker.io/squareup/certstrap sign `

    --passphrase "changeit" `

    --expires "3 year" `

    --csr /csr/Sololab_Org_v1_ICA1_v1.csr `

    --cert /out/Intermediate_CA1_v1.crt `

    --intermediate `

    --CA "Sololab Root" `

    "Intermediate CA1 v1"

Got this error


Get CA certificate error: permissions too lax for /out/Sololab_Root.crt: required no more than -r--r--r--, found -r-xr-xr-x