$OpenBSD: patch-certs_Makefile,v 1.6 2017/05/14 16:36:55 danj Exp $
--- certs/Makefile.orig	Mon Dec  5 13:54:23 2016
+++ certs/Makefile	Mon Mar 27 19:18:16 2017
@@ -2,13 +2,13 @@
 keysize=2048
 
 # How to:
-# First, `make yourhost.cnf` which creates a openssl config file.
+# First, `${MAKE_PROGRAM} yourhost.cnf` which creates a openssl config file.
 # Then edit this file and fill in the details you want it to have,
 # and add or change hosts and components it should cover.
-# Then `make yourhost.key` to create your private key, you can
+# Then `${MAKE_PROGRAM} yourhost.key` to create your private key, you can
 # include keysize=number to change the size of the key.
-# Then you can either `make yourhost.csr` to generate a certificate
-# signing request that you can submit to a CA, or `make yourhost.crt`
+# Then you can either `${MAKE_PROGRAM} yourhost.csr` to generate a certificate
+# signing request that you can submit to a CA, or `${MAKE_PROGRAM} yourhost.crt`
 # to generate a self signed certificate.
 
 .PRECIOUS: %.cnf %.key
@@ -28,3 +28,5 @@ keysize=2048
 %.key:
 	umask 0077 && openssl genrsa -out $@ $(keysize)
 	@chmod 400 $@
+	@chown _prosody $@ || \
+		echo "***WARNING***: You will need to 'chown _prosody $@'"
