From e8b69ae524a8c2f06cdc4b7dc9162159449d1a5d Mon Sep 17 00:00:00 2001 From: Mario Fetka Date: Sun, 26 Jul 2026 17:09:04 +0200 Subject: [PATCH] Make SMTP test CA readable by delivery agent --- contrib/testing/smtp-required-tls-check.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/contrib/testing/smtp-required-tls-check.py b/contrib/testing/smtp-required-tls-check.py index ad4fff9..b24d484 100755 --- a/contrib/testing/smtp-required-tls-check.py +++ b/contrib/testing/smtp-required-tls-check.py @@ -251,6 +251,7 @@ def make_tls_context(directory: Path) -> tuple[ssl.SSLContext, Path]: key = directory / "server.key" certificate = directory / "server.crt" template = directory / "cert.cfg" + directory.chmod(0o755) template.write_text( 'cn = "smtp08.test"\n' 'dns_name = "*.smtp08.test"\n' @@ -279,6 +280,7 @@ def make_tls_context(directory: Path) -> tuple[ssl.SSLContext, Path]: "--outfile", str(certificate), ]) + certificate.chmod(0o644) context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER) context.minimum_version = ssl.TLSVersion.TLSv1_2 context.load_cert_chain(certificate, key)