Alberto Bertogli 567ad35122 docker: Only do setfacl if we issued the certificates ...

Today, we do setfacl unconditionally; this can be a problem for
user-provided certificates because they may be located somewhere else.

This patch fixes the problem by only doing setfacl after renewing the
certificates.

Externally provided certificates will be untouched, and the user is
responsible for ensuring that chasquid can read them.

Thanks to Alex Ellwein (aellwein@github) for reporting this in
https://github.com/albertito/chasquid/issues/29!

2022-08-23 23:48:35 +01:00

3.3 KiB

Executable File

Raw Blame History

View Raw