From 6f55586f6bafbf1e0168ed3cde729d3702265ec4 Mon Sep 17 00:00:00 2001 From: Tristan PILAT Date: Fri, 22 Mar 2019 17:51:06 +0100 Subject: [PATCH] That check is not required in our use case for OpenBSD --- evocheck.sh | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/evocheck.sh b/evocheck.sh index 27eb705..5e5033d 100755 --- a/evocheck.sh +++ b/evocheck.sh @@ -398,13 +398,3 @@ if [ "$IS_EVOMAINTENANCECONF" = 1 ]; then && grep "^URGENCYTEL" $f |grep -qv "06.00.00.00.00" \ && grep "^REALM" $f |grep -qv "example.com" ) || echo 'IS_EVOMAINTENANCECONF FAILED!' fi - -if [ "$IS_PRIVKEYWOLRDREADABLE" = 1 ]; then - for f in /etc/ssl/private/*; do - perms=$(stat -L -c "%a" $f) - if [ ${perms: -1} != "0" ]; then - echo 'IS_PRIVKEYWOLRDREADABLE FAILED!' - break - fi - done -fi