From 8e3e252dea3e5d51a7428cf7c0d31894faac5b8e Mon Sep 17 00:00:00 2001
From: Kim Alvefur <zash@zash.se>
Date: Wed, 23 Dec 2015 12:07:03 +0100
Subject: certs/Makefile: Run key generation with a stricter umask (fixes a
 race condition)

---
 certs/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'certs/Makefile')

diff --git a/certs/Makefile b/certs/Makefile
index f3854c5f..c709ff91 100644
--- a/certs/Makefile
+++ b/certs/Makefile
@@ -26,5 +26,5 @@ keysize=2048
 	sed 's,example\.com,$*,g' openssl.cnf > $@
 
 %.key:
-	openssl genrsa $(keysize) > $@
-	@chmod 400 $@
+	umask 0077 && openssl genrsa -out $@ $(keysize)
+	@chmod 400 $@ -c
-- 
cgit v1.2.3