On 2022/12/18 03:06, Lucas wrote: > The following patch expands acme-client config file `domain` blocks to > allow for a `owner user:group` directive, which allows to get rid of > customs scripts that "fix" permissions for issued certs, mostly needed > in ports land. I don't find it too invasive, so I thought it could be > merged. Most of the code and manpage bits were taken from vmd.
Why do you need to chown a certificate? It is published to the world anyway in Certificate Transparency logs, what's the problem with root-owned and world-readable? (There would be more reason to do this for a key, but the existing handling seems good enough for that).
