certbot

mirror of https://github.com/certbot/certbot.git synced 2026-01-26 07:41:33 +03:00

Files

Brad Warren d1330efe41 Print warning when certbot-auto has insecure permissions. (#6995 )

This PR attempts to better inform people about the problem identified at https://community.letsencrypt.org/t/certbot-auto-deployment-best-practices/91979/.

I was hesitant to add the flag --no-permissions-check, however, if there's some obscure distro out there (or custom user setup) that has a strange users and groups, I didn't want us to either:

Have to put out a bug fix release
Refuse to fix the problem and let them deal with warnings on every run

* add check_permissions.py

* Update letsencrypt-auto.template.

* build letsencrypt-auto

* Add test_permissions_warnings to auto_test

* Allow uid/gid < 1000.

* Add --no-permissions-check to Certbot.

* Add --no-permissions-check to certbot-auto.

* Add test farm test that letsencrypt-auto is quiet.

As a bonus, this new test will catch problems like the one that the caused
0.33.1 point release.

* Update CHANGELOG about permissions check.

* Update permissions comment.

* Fix symlink handling.

* Use a better default in auto_test.py.

2019-04-30 10:45:03 -07:00

certs

Rename letsencrypt_auto dir to match other dirs.

2016-01-08 16:26:25 -05:00

fake-letsencrypt

Remove errant DS_Store. Ick.

2016-01-19 16:10:39 -05:00

__init__.py

Explicitly add six as a dependency in letsencrypt-auto-source dockerfiles (#5808 )

2018-03-29 15:34:38 -07:00

auto_test.py

Print warning when certbot-auto has insecure permissions. (#6995 )