fix path and perms

[dsa-puppet.git] / modules / ssl / manifests / init.pp

diff --git a/modules/ssl/manifests/init.pp b/modules/ssl/manifests/init.pp
index 4e52ad31a5d4ff5bf377dd4a2acc2505480eca68..062cf8dc420c140f18d23f190bde21ee0d025697 100644 (file)
--- a/modules/ssl/manifests/init.pp
+++ b/modules/ssl/manifests/init.pp
@@ -30,7 +30,7 @@ class ssl {
        }
        file { '/etc/ssl/debian/keys/thishost.key':
                source => "puppet:///modules/ssl/clientcerts/${::fqdn}.key",
-               mode   => '0640'
+               mode   => '0440'
        }
        file { '/etc/ssl/debian/certs/ca.crt':
                source => 'puppet:///modules/ssl/clientcerts/ca.crt',
@@ -44,10 +44,10 @@ class ssl {
                source  => "puppet:///modules/exim/certs/${::fqdn}.crt",
                notify => Exec['c_rehash /etc/ssl/debian/certs'],
        }
-       file { '/etc/ssl/debian/certs/thishost-server.key':
+       file { '/etc/ssl/debian/keys/thishost-server.key':
                source  => "puppet:///modules/exim/certs/${::fqdn}.key",
-               group   => ssl-certm,
-               mode    => '0640',
+               group   => ssl-cert,
+               mode    => '0440',
        }
 
        exec { 'c_rehash /etc/ssl/debian/certs':