Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

gRPC certificates are world readable #6064

Closed
denis2342 opened this issue Mar 5, 2023 · 0 comments · Fixed by #6075
Closed

gRPC certificates are world readable #6064

denis2342 opened this issue Mar 5, 2023 · 0 comments · Fixed by #6075
Assignees
@cdecker
Labels
Feature Request rust Issue related to rust
Milestone
v23.05

Comments

@denis2342
Copy link
Contributor

The files ca.pem, ca-key.pem, server.pem, server-key.pem, client.pem and client-key.pem are world readable.

> ls -la *.pem
-rw-r--r--  1 c-lightning  c-lightning  246 Mar  3 23:00 ca-key.pem
-rw-r--r--  1 c-lightning  c-lightning  572 Mar  3 23:00 ca.pem
-rw-r--r--  1 c-lightning  c-lightning  246 Mar  3 23:00 client-key.pem
-rw-r--r--  1 c-lightning  c-lightning  506 Mar  3 23:00 client.pem
-rw-r--r--  1 c-lightning  c-lightning  246 Mar  3 23:00 server-key.pem
-rw-r--r--  1 c-lightning  c-lightning  510 Mar  3 23:00 server.pem
@vincenzopalazzo vincenzopalazzo added Feature Request rust Issue related to rust labels Mar 5, 2023
cdecker added a commit to cdecker/lightning that referenced this issue Mar 7, 2023
@cdecker
grpc: make the mTLS private keys user-readable only
8587a7f 
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>
cdecker added a commit to cdecker/lightning that referenced this issue Mar 7, 2023
@cdecker
grpc: make the mTLS private keys user-readable only
037280a 
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>
@cdecker cdecker mentioned this issue Mar 7, 2023
Merged
@vincenzopalazzo vincenzopalazzo added this to the v23.05 milestone Mar 9, 2023
cdecker added a commit to cdecker/lightning that referenced this issue Mar 11, 2023
@cdecker
grpc: make the mTLS private keys user-readable only
6070ad0 
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>

Changelog-Changed: grpc: The mTLS private keys are no longer group-readable
vincenzopalazzo pushed a commit that referenced this issue Mar 24, 2023
@cdecker @vincenzopalazzo
grpc: make the mTLS private keys user-readable only
97de4f8 
Fixes #6064
Reported-by: denis2342 <@denis2342>

Changelog-Changed: grpc: The mTLS private keys are no longer group-readable
ddustin pushed a commit to ddustin/lightning that referenced this issue Apr 11, 2023
@cdecker @ddustin
grpc: make the mTLS private keys user-readable only
895dda6 
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>

Changelog-Changed: grpc: The mTLS private keys are no longer group-readable
gkrizek pushed a commit to voltagecloud/lightning that referenced this issue Apr 26, 2023
@cdecker @gkrizek
grpc: make the mTLS private keys user-readable only
b08247f 
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>

Changelog-Changed: grpc: The mTLS private keys are no longer group-readable
ddustin pushed a commit to ddustin/lightning that referenced this issue May 12, 2023
@cdecker @ddustin
grpc: make the mTLS private keys user-readable only
bcfdcb9 
Fixes ElementsProject#6064
Reported-by: denis2342 <@denis2342>

Changelog-Changed: grpc: The mTLS private keys are no longer group-readable
@kilrau kilrau mentioned this issue Mar 22, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cdecker cdecker

Labels
Feature Request rust Issue related to rust
Projects
None yet
Milestone
v23.05
Development

Successfully merging a pull request may close this issue.

grpc: Adjust the file permissions on mTLS private keys cdecker/lightning
3 participants
@cdecker @denis2342 @vincenzopalazzo