Protect only private keys and leave certificates world readable.

This commit is contained in:
Jens Meißner
2020-11-23 20:32:24 +01:00
parent 5b85a1c183
commit 2a770a93b1

View File

@@ -105,9 +105,11 @@ class DomainSSL
$_fh = fopen($filename, 'w'); $_fh = fopen($filename, 'w');
fwrite($_fh, $dom_certs[$type]); fwrite($_fh, $dom_certs[$type]);
fclose($_fh); fclose($_fh);
if ($type == 'ssl_key_file') {
chmod($filename, 0600); chmod($filename, 0600);
} }
} }
}
// override corresponding array values // override corresponding array values
$domain['ssl_cert_file'] = $ssl_files['ssl_cert_file']; $domain['ssl_cert_file'] = $ssl_files['ssl_cert_file'];
$domain['ssl_key_file'] = $ssl_files['ssl_key_file']; $domain['ssl_key_file'] = $ssl_files['ssl_key_file'];