5d557b98
fix: use 0600 permissions for CA private key file
a73x 2026-03-29 16:21
Commit message
ca/ca.go
| Old | New | ||
|---|---|---|---|
| @@ -109,7 +109,7 @@ func generate(certPath, keyPath string) (*x509.Certificate, *ecdsa.PrivateKey, e | |||
| 109 | if err != nil { | 109 | if err != nil { |
| 110 | return nil, nil, err | 110 | return nil, nil, err |
| 111 | } | 111 | } |
| 112 | keyFile, err := os.Create(keyPath) | 112 | keyFile, err := os.OpenFile(keyPath, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600) |
| 113 | if err != nil { | 113 | if err != nil { |
| 114 | return nil, nil, err | 114 | return nil, nil, err |
| 115 | } | 115 | } |