[stunnel-users] Insecure file permissions on /etc/ssl/private.key

josé,

The private-key file you have there is world-readable, which it most certainly should NOT be.

Also, "www-data" is a group, not a user, so you MUST be very careful to make sure that ONLY the web-server software can run as a member of that group and that no other user or process can do so. IF you can guarantee those, then permissions (spaces added here for clarity) of

- r w - r - - - - -

should be safe. Putting it another way:

chmod 0640 /etc/ssl/private.key

-- Mike