Function write_pem_private_key

nodedb/src/control/cluster/tls.rs:423–427

(path: &Path, der: &[u8])

}

fn write_pem_private_key(path: &Path, der: &[u8]) -> crate::Result<()> {
    super::pem_io::write_pem_private_key(path, der).map_err(|e| crate::Error::Config {
        detail: format!("write {}: {e}", path.display()),
    })
}

/// Refuse to start if a secret file is world- or group-readable.
/// Hard-fail is the only acceptable behaviour here — a warn+continue