<acme> package save certificate private key as world-readable
Open
Nobody has claimed this yet.
- Dominant language
- Makefile
- Stars
- 4.6k
- Forks
- 4k
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 134
Description
Maintainer: @\tohojo (find it by checking history of the package Makefile)
Environment: All
Description:
It is very obvious, when ACME renewed certificate, the private key was set world readable, best to put some permission setting there to make it only world-readable.
It shouldn’t break uhttpd anyway because it is running as root.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Check the package Makefile history to identify the ACME package and locate the certificate renewal handling. Verify where the private key is saved, then confirm the resulting permissions prevent world access without breaking uhttpd, which runs as root.
Written by the indexing model from the issue text.
Assessment
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100