> presumably the private key should be 0600, and maybe the directory 0700?

The directory should be 0700 -- did you use the script's "init" command, or
make the directories yourself? If you used "init" and it's not 0700, let me
know.

Just to be safe, i just sent Thomas a patch which sets umask 077 for the
entire script. 


-- 
Mike Schiraldi
VeriSign Applied Research

Attachment: smime.p7s
Description: application/pkcs7-signature

Reply via email to