From: cantor <cantor@cb58f699-b61c-0410-a6fe-9272a202ed29>
Date: Mon, 1 Mar 2010 14:17:17 +0000 (+0000)
Subject: https://bugs.internet2.edu/jira/browse/SSPCPP-106
X-Git-Tag: 2.4~108
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=shibboleth%2Fsp.git;a=commitdiff_plain;h=1b668e2d31e3d45c2caf88c6d58543e717d0014b

https://bugs.internet2.edu/jira/browse/SSPCPP-106

git-svn-id: https://svn.middleware.georgetown.edu/cpp-sp/branches/REL_2@3231 cb58f699-b61c-0410-a6fe-9272a202ed29
---

diff --git a/configs/keygen.sh b/configs/keygen.sh
index 5ae60db..a8cd80f 100755
--- a/configs/keygen.sh
+++ b/configs/keygen.sh
@@ -60,14 +60,10 @@ subjectAltName=$ALTNAME
 subjectKeyIdentifier=hash
 EOF
 
+umask 177
 if [ -z "$BATCH" ] ; then
     openssl req -config sp-cert.cnf -new -x509 -days $DAYS -keyout sp-key.pem -out sp-cert.pem
 else
     openssl req -config sp-cert.cnf -new -x509 -days $DAYS -keyout sp-key.pem -out sp-cert.pem 2> /dev/null
 fi
-
 rm sp-cert.cnf
-
-if  [ -s sp-key.pem ] ; then
-    chmod 600 sp-key.pem
-fi