Skip to content

Commit

Permalink
[FAB-10218] store keys without execute bit
Browse files Browse the repository at this point in the history 
Keys aren't executable.

Change-Id: Ide8d3e59f2189a1d26e971f49ab472b9743877db
Signed-off-by: Matthew Sykes <sykesmat@us.ibm.com>
@sykesm
sykesm committed May 18, 2018
1 parent c6d0e6c commit 737d60b
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions bccsp/sw/fileks.go
View file
Original file line number Diff line number Diff line change
@@ -288,7 +288,7 @@ func (ks *fileBasedKeyStore) storePrivateKey(alias string, privateKey interface{
return err
}

err = ioutil.WriteFile(ks.getPathForAlias(alias, "sk"), rawKey, 0700)
err = ioutil.WriteFile(ks.getPathForAlias(alias, "sk"), rawKey, 0600)
if err != nil {
logger.Errorf("Failed storing private key [%s]: [%s]", alias, err)
return err
@@ -304,7 +304,7 @@ func (ks *fileBasedKeyStore) storePublicKey(alias string, publicKey interface{})
return err
}

err = ioutil.WriteFile(ks.getPathForAlias(alias, "pk"), rawKey, 0700)
err = ioutil.WriteFile(ks.getPathForAlias(alias, "pk"), rawKey, 0600)
if err != nil {
logger.Errorf("Failed storing private key [%s]: [%s]", alias, err)
return err
@@ -320,7 +320,7 @@ func (ks *fileBasedKeyStore) storeKey(alias string, key []byte) error {
return err
}

err = ioutil.WriteFile(ks.getPathForAlias(alias, "key"), pem, 0700)
err = ioutil.WriteFile(ks.getPathForAlias(alias, "key"), pem, 0600)
if err != nil {
logger.Errorf("Failed storing key [%s]: [%s]", alias, err)
return err

0 comments on commit 737d60b

Please sign in to comment.