certbot

mirror of https://github.com/certbot/certbot.git synced 2026-01-26 07:41:33 +03:00

Files

sydneyli 7d0ac47139 Change default privkey permissions while preserving group permissions (#6480 )

Fixes #1473.

writes privkey.pem to 0600 by default for new lineages
on renewals where a new privkey is generated, preserves group mode and gid
Things this PR does not do:

we talked about forcing 0600 on privkeys when a Certbot upgrade is detected. Instead, this PR only creates new lineages with the more restrictive permission to prevent renewal breakages.
this doesn't solve many of the problems mentioned in #1473 that are not directly related to the title issue!

* safe_open on archive keyfiles

* keep group from current lineage

* clean up integration test

* safe_open can follow symlinks

* fix tests on windows, maybe

* Address Brad's comments

* Revert changes to safe_open
* Test chown is called when saving new key
* Reorder chown operation

* Changelog and documentation

* Fix documentation style

2018-11-29 09:33:05 -08:00

integration

Add and test new nginx parsing abstractions (#6383 )

2018-10-19 12:30:32 -07:00

letstest

Fix test_sdists test farm test (#6524 )

2018-11-20 18:39:12 -05:00

boulder-fetch.sh

Clean up boulder-fetch a bit. (#6032 )

2018-05-24 10:53:21 -07:00

boulder-integration.sh

Separate integration (#5814 )