tree fcfce0dbf3c08e4793f7579c2f11817beec1fdd4
parent e86a6aa9243ce908c71b2131686dbdeab61e57d9
author melanie witt <melwittt@gmail.com> 1552483011 +0000
committer melanie witt <melwittt@gmail.com> 1553485338 +0000

Set ownership of /etc/pki/<console> files for TLS

OpenSSL 1.0.2 generates key files with default permissions: 644 and the
files are copied to the /etc/pki/* directories with sudo.

When the default CI node Ubuntu version was changed from Xenial =>
Bionic we changed from OpenSSL 1.0.2 => 1.1.0. And OpenSSL 1.1.0
generates key files with default permissions: 600. When we copy the key
file to /etc/pki/* using sudo, it becomes owned by root and then the
console-related users are unable to read it.

This sets the ownership of the /etc/pki/<console> files to the
user:group intended to read them.

Closes-Bug: #1819794

Change-Id: I437a46c875cf633272e8cad0811e5557f2ac3641