Skip to content

Restrict access to domain conf#6744

Closed
h-haaks wants to merge 1 commit intoacmesh-official:devfrom
h-haaks:restrict-access-permissions-to-domain-conf
Closed

Restrict access to domain conf#6744
h-haaks wants to merge 1 commit intoacmesh-official:devfrom
h-haaks:restrict-access-permissions-to-domain-conf

Conversation

@h-haaks
Copy link
Contributor

@h-haaks h-haaks commented Jan 5, 2026

When toPkcs() is used the keystore password is saved to domain config.
Because of this the file should only be accessible by owner.

When toPkcs() is used the keystore password is saved to domain config.
Because of this the file should only be accessible by owner.
@neilpang
Copy link
Member

neilpang commented Jan 6, 2026

don't change the file permissions everytime. only change it to 600 when you first create it.

@neilpang neilpang closed this Jan 6, 2026
@h-haaks
Copy link
Contributor Author

h-haaks commented Jan 6, 2026

don't change the file permissions everytime. only change it to 600 when you first create it.

Hmm, isn't that exactly what I do by putting it in if [ ! -f "$DOMAIN_CONF" ]; then?

@neilpang
Copy link
Member

no, don't check it here everytime. find the place where the file is first created.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants