Create private/public key with correct mode.

htcondor · Feb 9, 2019 · 766431e · 766431e
1 parent 2db446d
commit 766431e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/credmon/utils/utils.py b/credmon/utils/utils.py
@@ -29,7 +29,7 @@ def atomic_output(file_contents, output_fname, mode=stat.S_IRUSR):
             fp.write(file_contents)
 
         # atomically move new tokens in place
-        atomic_rename(tmp_file_name, output_fname)
+        atomic_rename(tmp_file_name, output_fname, mode=mode)
 
     finally:
         try:
@@ -70,7 +70,7 @@ def create_credentials():
             format=serialization.PrivateFormat.TraditionalOpenSSL,
             encryption_algorithm=serialization.NoEncryption()
         )
-        atomic_output(private_pem, private_keyfile)
+        atomic_output(private_pem, private_keyfile, mode=0o600)
 
         public_pem = public_key.public_bytes(
             encoding=serialization.Encoding.PEM,