Bug#571631: libapache2-mod-shib2: shib-keygen generates world-readable key file

Ferenc Wagner wferi at niif.hu
Mon Mar 1 14:41:51 UTC 2010


Upstream fixed this (with amazing speed -- thanks, Scott!) by using
umask 177.  This is stricter than requested, as it affects the
certificate as well, not only the key.  Dominic, is this acceptable for
you?  (Btw. I recommend using the backported packages, they are more
mature in several respects besides the higher version numbers.)
-- 
Cheers,
Feri.





More information about the Pkg-shibboleth-devel mailing list