Pre-create key file with the correct mask.

[shibboleth/sp.git] / configs / keygen.sh

diff --git a/configs/keygen.sh b/configs/keygen.sh
index a8cd80f..16234a1 100755 (executable)
--- a/configs/keygen.sh
+++ b/configs/keygen.sh
@@ -60,7 +60,8 @@ subjectAltName=$ALTNAME
 subjectKeyIdentifier=hash
 EOF
 
-umask 177
+touch sp-key.pem
+chmod 600 sp-key.pem
 if [ -z "$BATCH" ] ; then
     openssl req -config sp-cert.cnf -new -x509 -days $DAYS -keyout sp-key.pem -out sp-cert.pem
 else