Security: fixed permissions on OpenSearch client cert after gen.

CogStack · Mar 14, 2024 · 739cfc5 · 739cfc5
1 parent 1ef997f
commit 739cfc5
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/security/create_opensearch_client_cert.sh b/security/create_opensearch_client_cert.sh
@@ -77,5 +77,7 @@ openssl x509 -req -days $ES_CERTIFICATE_TIME_VALIDITY_IN_DAYS -in "$ES_CLIENT_CE
 
 #-extfile <(printf "\nsubjectAltName=DNS:esnode-1,DNS:esnode-2,DNS:elasticsearch-1,DNS:elasticsearch-2,DNS:elasticsearch-node-1,DNS:elasticsearch-node-2,DNS:elasticsearch-cogstack-node-2,DNS:elasticsearch-cogstack-node-1,DNS:localhost") 
 
+chmod -R 755 "./$ES_CLIENT_CERT_NAME"*
+
 mv "$ES_CLIENT_CERT_NAME"* $OPENSEARCH_ES_CERTIFICATES_FOLDER