Skip to content

Commit 84aaa6b

Browse files
committed
Fixed permissions on validation keys. This resolves CHEF-1015
1 parent eff6b83 commit 84aaa6b

1 file changed

Lines changed: 3 additions & 0 deletions

File tree

chef/lib/chef/certificate.rb

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -149,6 +149,9 @@ def gen_validation_key(name=Chef::Config[:validation_client_name], key_file=Chef
149149
File.open(key_file, File::WRONLY|File::EXCL|File::CREAT, 0600) do |f|
150150
f.print(api_client.private_key)
151151
end
152+
if (Chef::Config[:signing_ca_user] && Chef::Config[:signing_ca_group])
153+
FileUtils.chown(Chef::Config[:signing_ca_user], Chef::Config[:signing_ca_group], key_file)
154+
end
152155
end
153156
end
154157

0 commit comments

Comments
 (0)