Quote:
Originally Posted by cdmdotnet  2. Second stage
As root: IE sudo -i
tar cf /tmp/zimbra-ca-bak.tar /opt/zimbra/conf/ca/
rm -rf /opt/zimbra/conf/ca/*
cp /opt/zimbra/ssl/zimbra/ca/ca.key /opt/zimbra/conf/ca/ca.key
cp /opt/zimbra/ssl/zimbra/ca/ca.pem /opt/zimbra/conf/ca/ca.pem
ln -f -s ca.pem /opt/zimbra/conf/ca/`openssl x509 -hash -noout -in /opt/zimbra/conf/ca/ca.pem`.0
chmod 644 /opt/zimbra/conf/ca/* |
Doesn't the last line above leave /opt/zimbra/conf/ca/ca.key world-readable when it should be chmod'ed to only 600?