From 2e6fbaa79fe400ea2ba86b8a2d63edc7837d7a6e Mon Sep 17 00:00:00 2001
From: Stephen Benjamin <stephen@redhat.com>
Date: Wed, 12 Apr 2017 09:59:11 -0400
Subject: [PATCH] fixes #19259 - apache key should be mode 0440

Foreman launches websockify process that needs read access to
this key.
---
 manifests/apache.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/apache.pp b/manifests/apache.pp
index cd772d44..62e4c3ac 100644
--- a/manifests/apache.pp
+++ b/manifests/apache.pp
@@ -52,7 +52,7 @@
       key_file   => $apache_key,
       manage_key => true,
       key_owner  => $::apache::user,
-      key_mode   => '0400',
+      key_mode   => '0440',
       key_group  => $::certs::group,
       cert_file  => $apache_cert,
       notify     => Service['httpd'],