Ensure that server key is readable only by owner

8 years ago · bc7717ac26
1 changed files with 1 additions and 0 deletions
--- a/acme.sh
+++ b/acme.sh
@ -4166,6 +4166,7 @@ _installcert() {
      cp "$_real_key" "$_backup_path/key.bak"
    fi
    cat "$CERT_KEY_PATH" >"$_real_key"
+    chmod go-rwx "$_real_key"
  fi

  if [ "$_real_fullchain" ]; then