nik/easyrsa
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Default cert expire down to 825 days

Browse Source 
* resolves #52

Signed-off-by: Eric F Crist <ecrist@secure-computing.net>
This commit is contained in:
Eric F Crist 2019-11-25 19:17:46 -06:00
parent f00ab0f85b
commit 7f727b791b
No known key found for this signature in database
GPG Key ID: 72964219390D0D0E
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
easyrsa3/easyrsa
View File

@ -1603,7 +1603,7 @@ Note: using Easy-RSA configuration from: $vars"
set_var EASYRSA_CURVE secp384r1
set_var EASYRSA_EC_DIR "$EASYRSA_PKI/ecparams"
set_var EASYRSA_CA_EXPIRE 3650
set_var EASYRSA_CERT_EXPIRE 1080 # new default of 36 months
set_var EASYRSA_CERT_EXPIRE 825 # new default of 36 months
set_var EASYRSA_CERT_RENEW 30
set_var EASYRSA_CRL_DAYS 180
set_var EASYRSA_NS_SUPPORT no

2
easyrsa3/vars.example
View File

@ -125,7 +125,7 @@ fi
# In how many days should certificates expire?
#set_var EASYRSA_CERT_EXPIRE 1080
#set_var EASYRSA_CERT_EXPIRE 825
# How many days until the next CRL publish date? Note that the CRL can still be
# parsed after this timeframe passes. It is only used for an expected next