summaryrefslogtreecommitdiff
path: root/sitemodules
diff options
context:
space:
mode:
authorJan Dittberner <jandd@cacert.org>2022-08-11 17:30:56 +0200
committerJan Dittberner <jandd@cacert.org>2022-08-11 17:30:56 +0200
commit7cbcda022487fc06832bf9a60423f853a1f40971 (patch)
tree380cc7421dfbcfb6de07977d895caac06575696c /sitemodules
parent695403ba02e5dab1da388c54de3a08dda92fc6fa (diff)
downloadcacert-puppet-master.tar.gz
cacert-puppet-master.tar.xz
cacert-puppet-master.zip
Set group for private keys to ssl-certHEADmaster
Diffstat (limited to 'sitemodules')
-rw-r--r--sitemodules/profiles/manifests/x509cert_common.pp2
1 files changed, 1 insertions, 1 deletions
diff --git a/sitemodules/profiles/manifests/x509cert_common.pp b/sitemodules/profiles/manifests/x509cert_common.pp
index 935d44c..88edace 100644
--- a/sitemodules/profiles/manifests/x509cert_common.pp
+++ b/sitemodules/profiles/manifests/x509cert_common.pp
@@ -62,7 +62,7 @@ class profiles::x509cert_common (
file { "/etc/ssl/private/${name}.key.pem":
ensure => file,
owner => pick($cert_info['key_owner'], 'root'),
- group => pick($cert_info['key_group'], 'root'),
+ group => pick($cert_info['key_group'], 'ssl-cert'),
mode => pick($cert_info['key_mode'], '0640'),
content => $cert_info['private_key'],
}