mirror of
https://github.com/jupyter/docker-stacks.git
synced 2025-10-13 21:12:57 +00:00
Set permissions on PEM_FILE, if generated.
This commit is contained in:
@@ -3,6 +3,7 @@ from jupyter_core.paths import jupyter_data_dir
|
|||||||
import subprocess
|
import subprocess
|
||||||
import os
|
import os
|
||||||
import errno
|
import errno
|
||||||
|
import stat
|
||||||
|
|
||||||
PEM_FILE = os.path.join(jupyter_data_dir(), 'notebook.pem')
|
PEM_FILE = os.path.join(jupyter_data_dir(), 'notebook.pem')
|
||||||
|
|
||||||
@@ -27,6 +28,8 @@ if 'USE_HTTPS' in os.environ:
|
|||||||
'-newkey', 'rsa:2048', '-days', '365', '-nodes', '-x509',
|
'-newkey', 'rsa:2048', '-days', '365', '-nodes', '-x509',
|
||||||
'-subj', '/C=XX/ST=XX/L=XX/O=generated/CN=generated',
|
'-subj', '/C=XX/ST=XX/L=XX/O=generated/CN=generated',
|
||||||
'-keyout', PEM_FILE, '-out', PEM_FILE])
|
'-keyout', PEM_FILE, '-out', PEM_FILE])
|
||||||
|
# Restrict access to PEM_FILE
|
||||||
|
os.chmod(PEM_FILE, stat.S_IRUSR | stat.S_IWUSR)
|
||||||
c.NotebookApp.certfile = PEM_FILE
|
c.NotebookApp.certfile = PEM_FILE
|
||||||
|
|
||||||
# Set a password if PASSWORD is set
|
# Set a password if PASSWORD is set
|
||||||
|
Reference in New Issue
Block a user