Browse Source

Merge pull request #623 from kevinoid/fix-well-known-perms

Avoid permissions errors for chown .well-known
neil 7 months ago
parent
commit
be35b55444
1 changed files with 5 additions and 3 deletions
  1. 5 3
      acme.sh

+ 5 - 3
acme.sh

@@ -5005,9 +5005,11 @@ $_authorizations_map"
 
         _debug "Writing token: $token to $wellknown_path/$token"
 
-        mkdir -p "$wellknown_path"
-
-        if ! printf "%s" "$keyauthorization" >"$wellknown_path/$token"; then
+        # Ensure .well-known is visible to web server user/group
+        # https://github.com/Neilpang/acme.sh/pull/32
+        if ! (umask ugo+rx &&
+          mkdir -p "$wellknown_path" &&
+          printf "%s" "$keyauthorization" >"$wellknown_path/$token"); then
           _err "$d: Cannot write token to file: $wellknown_path/$token"
           _clearupwebbroot "$_currentRoot" "$removelevel" "$token"
           _clearup