openvpn: Fix mode of shellpki script

CHANGELOG.md

@@ -55,6 +55,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * varnish: fix missing state, that blocked the task
 * proftpd: Fix format of public key files controlled by ansible
 * proftpd: Fix mode of public key directory and files (they have to be accessible by proftpd:nobody)
+* openvpn: Fix mode of shellpki script
 
 ### Removed
 

openvpn/tasks/debian.yml

@@ -48,7 +48,7 @@
     group: "{{ item.group }}"
   with_items:
      - { source: "openssl.cnf", destination: "/etc/shellpki/openssl.cnf", mode: "0640", owner: "shellpki", group: "shellpki" }
-     - { source: "shellpki", destination: "/usr/local/sbin/shellpki", mode: "0755", owner: "root", group: "root" }
+     - { source: "shellpki", destination: "/usr/local/sbin/shellpki", mode: "0750", owner: "root", group: "root" }
 
 - name: Add sudo rights
   lineinfile:

openvpn/tasks/openbsd.yml

@@ -38,7 +38,7 @@
     group: "{{ item.group }}"
   with_items:
      - { source: "openssl.cnf", destination: "/etc/shellpki/openssl.cnf", mode: "0640", owner: "_shellpki", group: "_shellpki" }
-     - { source: "shellpki", destination: "/usr/local/sbin/shellpki", mode: "0755", owner: "root", group: "wheel" }
+     - { source: "shellpki", destination: "/usr/local/sbin/shellpki", mode: "0750", owner: "root", group: "wheel" }
 
 - name: Add sudo rights
   lineinfile: