|
@@ -107,11 +107,11 @@ two certificate signing requests:
|
|
|
|
|
|
$ rm -v client.csr server.csr
|
|
|
|
|
|
-With a default `umask` of 022 your secret keys will be *world-readable* and
|
|
|
+With a default `umask` of 022, your secret keys will be *world-readable* and
|
|
|
writable for you and your group.
|
|
|
|
|
|
-To remove write permissions for your keys in order to protect them from accidental
|
|
|
-damage and make them only readable to you issue the following file mode changes:
|
|
|
+In order to protect your keys from accidental damage, you will want to remove their
|
|
|
+write permissions. To make them read-only, change file modes as follows:
|
|
|
|
|
|
$ chmod -v 0400 ca-key.pem key.pem server-key.pem
|
|
|
|