Differential D3732

Enforce correct attributes for acme.sh private keys
ClosedPublic
Actions

Authored by dereckson on Fri, Oct 10, 22:19.

Details

Reviewers

DorianWinty

Maniphest Tasks

T2132: Propagate acme.sh certificate so Dovecot can read it

Commits

rOPS358d87a18155: Enforce correct attributes for acme.sh private keys

Summary

Apply logic from 421712d5da56 to private key files too, so several applications
can access the certificate private key they need.

Ref T2132

Test Plan

When run on Hervil, confirmed no-op as keys are already 640/600.

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

certificates-640

Build Status

Buildable 5983
Build 6265: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Fri, Oct 10, 22:19

dereckson created this revision.

Harbormaster completed remote builds in B5983: Diff 9652.Fri, Oct 10, 22:19

Complector

$ salt hervil state.apply roles/core/certificates/acmesh test=True
[...]
----------                                                                                                
          ID: /var/certificates/mail.nasqueron.org/key.pem                                                
    Function: file.managed
      Result: True
     Comment: File /var/certificates/mail.nasqueron.org/key.pem not updated
     Started: 22:16:57.301699
    Duration: 1.387 ms
     Changes:   
----------
[...]