diff --git a/upd/fix_vesta_ssl_permissions.sh b/upd/fix_vesta_ssl_permissions.sh
new file mode 100755
index 00000000..5137631f
--- /dev/null
+++ b/upd/fix_vesta_ssl_permissions.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+
+chown root:mail /usr/local/vesta/ssl/*
+chmod 660 /usr/local/vesta/ssl/*