From 01d682ff3f610bdb63ecf604f37902f76fbc65ae Mon Sep 17 00:00:00 2001
From: Carlos Konstanski <ckonstanski@pippiandcarlos.com>
Date: Tue, 6 Feb 2018 07:49:44 -0700
Subject: SSL key should be owned by root

---
 salt/openbook/ansible/files/ssl.yaml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'salt')

diff --git a/salt/openbook/ansible/files/ssl.yaml b/salt/openbook/ansible/files/ssl.yaml
index 8c96ebb..cb61c44 100644
--- a/salt/openbook/ansible/files/ssl.yaml
+++ b/salt/openbook/ansible/files/ssl.yaml
@@ -37,6 +37,7 @@
               chmod 644 "/etc/ssl/certs/{{ item }}.crt"
               chown root: "/etc/ssl/certs/{{ item }}.crt"
               chmod 640 "/etc/ssl/private/{{ item }}.key"
+              chown root: "/etc/ssl/private/{{ item }}.key"
           fi
         executable: /bin/bash
       with_items:
-- 
cgit v1.3