etc/config.tcl: Fix the validity duration for certificates.

[ca] / etc / config.tcl

diff --git a/etc/config.tcl b/etc/config.tcl
index 47e61b6..84a7651 100644 (file)
--- a/etc/config.tcl
+++ b/etc/config.tcl
@@ -16,14 +16,14 @@ set P(tls-client) {
   extensions tls-client-extensions
   issue-time "*-*-* 03:00:00"
   start-skew 1
-  expire-interval 2
+  expire-interval 32
 }
 
 set P(tls-server) {
   extensions tls-server-extensions
   issue-time "*-*-* 03:00:00"
   start-skew 1
-  expire-interval 2
+  expire-interval 32
 }
 
 proc update-hook {} {