Skip to content

Commit

Permalink
chmod remote file copied by ssh to be all-readable
Browse files Browse the repository at this point in the history
This is for the case where remote umask is not world-readable:
something like 0027 or even 0077 (not even group-readable).

Remote file copied to /.well-known/ should perhaps be world-readable.
It really depends on web server configuration but we assume the most
common configuration.
  • Loading branch information
phdru committed May 28, 2017
1 parent 7a9ffb5 commit 4ac3ed4
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions getssl
Original file line number Diff line number Diff line change
Expand Up @@ -516,10 +516,12 @@ copy_file_to_location() { # copies a file, using scp, sftp or ftp if required.
error_exit "problem copying file to the server using scp.
scp $from ${to:4}"
fi
servername=$(echo "$to" | awk -F":" '{print $2}')
tofile=$(echo "$to" | awk -F":" '{print $3}')
# shellcheck disable=SC2029
ssh "$servername" "chmod a+r $tofile"
debug "userid $TOKEN_USER_ID"
if [[ "$cert" == "challenge token" ]] && [[ ! -z "$TOKEN_USER_ID" ]]; then
servername=$(echo "$to" | awk -F":" '{print $2}')
tofile=$(echo "$to" | awk -F":" '{print $3}')
debug "servername $servername"
debug "file $tofile"
# shellcheck disable=SC2029
Expand Down

0 comments on commit 4ac3ed4

Please sign in to comment.