mirror of
https://git.lapiole.org/dani/ansible-roles.git
synced 2025-04-26 07:05:19 +02:00
9 lines
328 B
Plaintext
9 lines
328 B
Plaintext
|
#!/bin/bash
|
||
|
|
|
||
|
|
chown -R {{ pki_user }}:{{ pki_user }} {{ pki_root_dir }}/etc/ssl
|
||
|
|
chmod 700 {{ pki_root_dir }}/etc/ssl
|
||
|
|
# The root key is not used by OpenXPKI itself, protect it
|
||
|
|
chown root:root {{ pki_root_dir }}/etc/ssl/root/signer-key-1.pem
|
||
|
|
# Restrict access to the different keys
|
||
|
|
chmod 600 {{ pki_root_dir }}/etc/ssl/*/*key*.pem
|