From 9d7fd9609df0bae763ee9b523bc1456ef2e478de Mon Sep 17 00:00:00 2001
From: Mark Wooding <mdw@distorted.org.uk>
Date: Sat, 1 Dec 2012 14:26:21 +0000
Subject: [PATCH] bin/setup: Fix permissions on `ca.key' and `ca.cert'.

The previous thing was a mix of both, and didn't work properly.
---
 bin/setup | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/bin/setup b/bin/setup
index 845c2a4..a87d5b4 100755
--- a/bin/setup
+++ b/bin/setup
@@ -67,9 +67,12 @@ exec >@stdout 2>@stderr openssl req -config "etc/openssl.conf"  \
     -text -out "ca.cert" -keyout "private/ca.key" \
     -new -x509 -days $C(ca-period) \
     -subj $subject
-file attributes "ca.cert" \
+file attributes "private/ca.key" \
     -owner $C(ca-owner) -group $C(ca-group) \
     -permissions 0640
+file attributes "ca.cert" \
+    -owner $C(ca-owner) -group $C(ca-group) \
+    -permissions 0644
 
 ## Set up the directories for the actual certificates.  These are published
 ## by the web server.
-- 
2.11.0