search

zenhack / simp_le

Simple Let's Encrypt client
GNU General Public License v3.0
224 stars 38 forks source link

Cleanup webroot #10

Closed zenhack closed 7 years ago

zenhack commented 7 years ago

Issue by mikedevita Friday Dec 04, 2015 at 18:08 GMT _Originally opened as https://github.com/kuba/simp_le/issues/28_

I am using the following script to generate certificates and noticed the /tmp/letsencrypt dir contents are left intact even after ssl generation. Should I be deleting these after generation?

DOMAIN=domain.com;
sudo mkdir /etc/nginx/ssl/${DOMAIN};
sudo chmod 700 /etc/nginx/ssl/${DOMAIN};
cd /etc/nginx/ssl/${DOMAIN};
simp_le -d ${DOMAIN}:/tmp/letsencrypt -f key.pem -f cert.pem -f fullchain.pem
sudo chmod -R 400 /etc/nginx/ssl/${DOMAIN}/*;
zenhack commented 7 years ago

Comment by kuba Sunday Dec 06, 2015 at 00:15 GMT

I don't believe that leaving those files poses any security risk, but it would be better if client cleaned up after itself.