Chef

• Type: Bug
• Status: Closed
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 0.8.2
• Fix Version/s: 0.8.4
• Component/s: Chef Server
• Labels:

  None

This is quite similar to CHEF-975:

File.open(ca_keypair_file, "w") { |f| f.write keypair.to_pem }

This will, by default, leave the key world readable.

Also, defaulting to a 1024 bit RSA key is a bit on the weak side, I recommend going to at least 2048 if not 4096 bits to have a good security buffer.

• Assignee:

  Adam Jacob

  Reporter:

  Tollef Fog Heen

• Created:

  01/Mar/10 7:45 PM

  Updated:

  05/Mar/10 12:21 AM

  Resolved:

  01/Mar/10 7:50 PM