From 840abdfbd935b56aaa55ca3ccabf8860f667c3be Mon Sep 17 00:00:00 2001
From: Pierre-Yves Chibon <pingou@pingoured.fr>
Date: Fri, 1 Aug 2014 17:02:40 +0200
Subject: [PATCH] Fix mode for the .crt

---
 roles/openvpn/client/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/openvpn/client/tasks/main.yml b/roles/openvpn/client/tasks/main.yml
index 032cda18ff..c29ce8e8da 100644
--- a/roles/openvpn/client/tasks/main.yml
+++ b/roles/openvpn/client/tasks/main.yml
@@ -19,7 +19,7 @@
       mode: '0644' }
   - { file: "{{ puppet_private }}/vpn/openvpn/keys/{{ inventory_hostname }}.crt",
       dest: "/etc/openvpn/client.crt",
-      mode: '0644' }
+      mode: '0600' }
   - { file: "{{ puppet_private }}/vpn/openvpn/keys/{{ inventory_hostname }}.key",
       dest: "/etc/openvpn/client.key",
       mode: '0600' }