Add possibility to configure umask

doc/EasyRSA-Advanced.md

@@ -120,5 +120,7 @@ possible terse description is shown below:
     password using any openssl password options like pass:1234 or env:var
  *  `EASYRSA_PASSOUT` (CLI: `--passout`) - allows to specify a source for
     password using any openssl password options like pass:1234 or env:var
+ *  `EASYRSA_UMASK` - safe umask to use for file creation. Defaults to `077`
+ *  `EASYRSA_NO_UMASK` - disable safe umask. Files will be created using the system's defúlts
     
 **NOTE:** the global options need to be provided before the actual commands.

easyrsa3/easyrsa

@@ -2392,7 +2392,7 @@ NL='
 '
 
 # Be secure with a restrictive umask
-[ -z "$EASYRSA_NO_UMASK" ] && umask 077
+[ -z "$EASYRSA_NO_UMASK" ] && umask ${EASYRSA_UMASK:-077}
 
 # Parse options
 while :; do