kelvin/warewulf
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Explicitly set permissions on import TLS keys and certificates

Browse Source 
Signed-off-by: Jonathon Anderson <janderson@ciq.com>
This commit is contained in:
Jonathon Anderson
2026-02-17 14:22:33 -07:00
parent 26cec668e6
commit 2cac6b11a6
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
internal/app/wwctl/configure/tls/main.go
View File

@@ -43,9 +43,15 @@ func CobraRunE(cmd *cobra.Command, args []string) error {
if err := util.CopyFile(sourceKey, keyFile); err != nil { if err := util.CopyFile(sourceKey, keyFile); err != nil {
return fmt.Errorf("failed to import key: %w", err) return fmt.Errorf("failed to import key: %w", err)
} }
if err := os.Chmod(keyFile, 0600); err != nil {
return fmt.Errorf("failed to set key file permissions: %w", err)
}
if err := util.CopyFile(sourceCert, certFile); err != nil { if err := util.CopyFile(sourceCert, certFile); err != nil {
return fmt.Errorf("failed to import cert: %w", err) return fmt.Errorf("failed to import cert: %w", err)
} }
if err := os.Chmod(certFile, 0644); err != nil {
return fmt.Errorf("failed to set cert file permissions: %w", err)
}
fmt.Fprintf(cmd.OutOrStdout(), "Imported keys from %s\n", importPath) fmt.Fprintf(cmd.OutOrStdout(), "Imported keys from %s\n", importPath)
if err := configure.WAREWULFD(); err != nil { if err := configure.WAREWULFD(); err != nil {