Fix all domtool scripts for modern Debian and HCoop practices

[hcoop/domtool2.git] / scripts / domtool-addcert

diff --git a/scripts/domtool-addcert b/scripts/domtool-addcert
index 8d9e295..6e58197 100755 (executable)
--- a/scripts/domtool-addcert
+++ b/scripts/domtool-addcert
@@ -15,7 +15,7 @@ CERTFILE=/afs/hcoop.net/common/etc/domtool/certs/$USER.pem
 
 mkdir $KEYDIR || echo Key directory already exists.
 openssl genrsa -out $KEYFILE
-chown -R domtool.domtool $KEYDIR
+chown -R domtool.nogroup $KEYDIR
 fs sa $KEYDIR $USER read || echo This must be a server principal.
 echo "." >$KEYIN
 echo "." >>$KEYIN
@@ -32,4 +32,4 @@ cat $NEWREQ $KEYFILE >$NEW
 rm $NEWREQ
 openssl ca -batch -config /etc/domtool/openssl.cnf -policy policy_anything -out $CERTFILE -infiles $NEW
 rm $NEW
-chown domtool.domtool $CERTFILE
+chown domtool.nogroup $CERTFILE