$OpenBSD: patch-certs_Makefile,v 1.5 2016/01/11 12:11:36 sthen Exp $
--- certs/Makefile.orig	Fri Jan  8 13:07:07 2016
+++ certs/Makefile	Mon Jan 11 12:01:57 2016
@@ -2,13 +2,13 @@
 keysize=2048
 
 # How to:
-# First, `make yourhost.cnf` which creates a openssl config file.
+# First, `${MAKE_PROGRAM} yourhost.cnf` which creates a openssl config file.
 # Then edit this file and fill in the details you want it to have,
 # and add or change hosts and components it should cover.
-# Then `make yourhost.key` to create your private key, you can
+# Then `${MAKE_PROGRAM} yourhost.key` to create your private key, you can
 # include keysize=number to change the size of the key.
-# Then you can either `make yourhost.csr` to generate a certificate
-# signing request that you can submit to a CA, or `make yourhost.crt`
+# Then you can either `${MAKE_PROGRAM} yourhost.csr` to generate a certificate
+# signing request that you can submit to a CA, or `${MAKE_PROGRAM} yourhost.crt`
 # to generate a self signed certificate.
 
 .PRECIOUS: %.cnf %.key
@@ -27,4 +27,6 @@ keysize=2048
 
 %.key:
 	umask 0077 && openssl genrsa -out $@ $(keysize)
-	@chmod 400 $@ -c
+	@chmod 400 $@
+	@chown _prosody $@ || \
+		echo "***WARNING***: You will need to 'chown _prosody $@'"
