Merge pull request #900 from heptalium/master
Protect only private keys and leave certificates world readable.
This commit is contained in:
@@ -105,7 +105,11 @@ class DomainSSL
|
|||||||
$_fh = fopen($filename, 'w');
|
$_fh = fopen($filename, 'w');
|
||||||
fwrite($_fh, $dom_certs[$type]);
|
fwrite($_fh, $dom_certs[$type]);
|
||||||
fclose($_fh);
|
fclose($_fh);
|
||||||
chmod($filename, 0600);
|
if ($type == 'ssl_key_file') {
|
||||||
|
chmod($filename, 0600);
|
||||||
|
} else {
|
||||||
|
chmod($filename, 0644);
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
// override corresponding array values
|
// override corresponding array values
|
||||||
|
|||||||
Reference in New Issue
Block a user