From 73e7e3a2755378d3b869e1af694684b08a91ba40 Mon Sep 17 00:00:00 2001
From: fredde-fisk <mensluta@gmail.com>
Date: Mon, 28 Oct 2013 10:00:17 +0100
Subject: [PATCH] Invalid "-days" argument to openssl req in pkitool

See https://community.openvpn.net/openvpn/ticket/198
---
 easy-rsa/2.0/pkitool | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/easy-rsa/2.0/pkitool b/easy-rsa/2.0/pkitool
index b79e0de..0deaff8 100755
--- a/easy-rsa/2.0/pkitool
+++ b/easy-rsa/2.0/pkitool
@@ -366,7 +366,7 @@ if [ -d "$KEY_DIR" ] && [ "$KEY_CONFIG" ]; then
         fi
 
         # Build cert/key
-        ( [ $DO_REQ -eq 0 ] || $OPENSSL req $BATCH -days $KEY_EXPIRE $NODES_REQ -new -newkey rsa:$KEY_SIZE \
+        ( [ $DO_REQ -eq 0 ] || $OPENSSL req $BATCH $NODES_REQ -new -newkey rsa:$KEY_SIZE \
                 -keyout "$FN.key" -out "$FN.csr" $REQ_EXT -config "$KEY_CONFIG" $PKCS11_ARGS ) && \
             ( [ $DO_CA -eq 0 ]  || $OPENSSL ca $BATCH -days $KEY_EXPIRE -out "$FN.crt" \
                 -in "$FN.csr" $CA_EXT -config "$KEY_CONFIG" ) && \