diff options
| author | Evgeniy Khramtsov <ekhramtsov@process-one.net> | 2017-11-19 10:10:21 +0300 |
|---|---|---|
| committer | Evgeniy Khramtsov <ekhramtsov@process-one.net> | 2017-11-19 10:10:21 +0300 |
| commit | 49c4aa238ff0c994bc76679e04011afb93087d74 (patch) | |
| tree | 67dd1a7798ad5d0ecc55caf2c5b3e6fab03d66f9 /src/ejabberd_acme.erl | |
| parent | Re-read ACME certificates on config reload (diff) | |
Change file mode of ACME certficates
Diffstat (limited to '')
| -rw-r--r-- | src/ejabberd_acme.erl | 14 |
1 files changed, 10 insertions, 4 deletions
diff --git a/src/ejabberd_acme.erl b/src/ejabberd_acme.erl index 9793b170e..a5166b45d 100644 --- a/src/ejabberd_acme.erl +++ b/src/ejabberd_acme.erl @@ -1022,9 +1022,9 @@ persistent_file() -> filename:join(AcmeDir, "acme.DAT"). %% The persistent file should be read and written only by its owner --spec persistent_file_mode() -> 384. -persistent_file_mode() -> - 8#400 + 8#200. +-spec file_mode() -> 384. +file_mode() -> + 8#600. -spec read_persistent() -> {ok, acme_data()} | no_return(). read_persistent() -> @@ -1054,7 +1054,7 @@ create_persistent() -> Binary = term_to_binary(data_empty()), case file:write_file(persistent_file(), Binary) of ok -> - case file:change_mode(persistent_file(), persistent_file_mode()) of + case file:change_mode(persistent_file(), file_mode()) of ok -> ok; {error, Reason} -> ?ERROR_MSG("Error: ~p changing acme data file mode", [Reason]), @@ -1144,6 +1144,12 @@ register_certfiles() -> write_cert(CertificateFile, Cert, DomainName) -> case file:write_file(CertificateFile, Cert) of ok -> + case file:change_mode(CertificateFile, file_mode()) of + ok -> ok; + {error, Why} -> + ?WARNING_MSG("Failed to change mode of file ~s: ~s", + [CertificateFile, file:format_error(Why)]) + end, {ok, DomainName, saved}; {error, Reason} -> ?ERROR_MSG("Error: ~p saving certificate at file: ~p", |