[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Monit file policy check for SSL files
|
From: |
Jan-Henrik Haukeland |
|
Subject: |
Re: Monit file policy check for SSL files |
|
Date: |
29 Oct 2002 14:04:40 +0100 |
|
User-agent: |
Gnus/5.0808 (Gnus v5.8.8) XEmacs/21.4 (Civil Service) |
Christian Hopp <address@hidden> writes:
> Hi!
>
> Right now we just check the security policy of the rcfile. I have
> made some code to do this for the SSL files too.
>
> My idea:
> - Server PEM files (it includes private keys) 0700 or less
> - Client PEM files (it includes just certificates) 0744 or less
>
> I have made a generalizes check_file routine which is used in
> check_rcfiles and check_ssl_files. It has a more descriptive error
> message and it is now fully POSIX compatible (We don't know when we
> might need it.).
Sounds good!
--
Jan-Henrik Haukeland