X-Git-Url: https://git.distorted.org.uk/~mdw/ca/blobdiff_plain/0208298d32bb8eebce6e516a6afea9c81c41c716..ab54a4bc04d35bcf6c0574055a998434f1c3055b:/bin/make-ca-key

diff --git a/bin/make-ca-key b/bin/make-ca-key
index bb3f83b..d24a902 100755
--- a/bin/make-ca-key
+++ b/bin/make-ca-key
@@ -3,6 +3,7 @@
 set -e
 certroot=$(cd ${0%/*}/..; pwd)
 cd "$certroot"
+. lib/func.sh
 umask 022
 
 ## Archive any existing CA.
@@ -27,7 +28,7 @@ rm -f ca.cert distorted.crl
 ## Build a new one.
 mkdir -m750 private
 mkdir -m775 certs crls index index/byhash index/byserial state tmp
-chown root:ca certs crls index index/byhash index/byserial private state tmp
+chown $ca_owner:$ca_group certs crls index index/byhash index/byserial private state tmp
 touch state/db
 echo 01 >state/serial
 echo 01 >state/crlnumber
@@ -41,5 +42,5 @@ umask 027
 openssl req -new -config openssl.conf -x509 -days 3650 \
 	-out ca.cert -keyout private/ca.key \
 	-subj "$subject"
-chown root:ca private/ca.key
+chown $ca_owner:$ca_group private/ca.key
 chmod 644 ca.cert