~mdw / ca / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a0eb4b7) | patch
etc/config.tcl: Fix the validity duration for certificates.
authorMark Wooding <mdw@distorted.org.uk>
Thu, 6 Dec 2012 03:20:22 +0000 (03:20 +0000)
committerMark Wooding <mdw@distorted.org.uk>
Thu, 6 Dec 2012 03:25:16 +0000 (03:25 +0000)
commita74110245808014a62f620f63a5c00128411987f
treec51638bfd90daf14f94155667c8d19cc122e1cfftree | snapshot (tar.gz zip)
parenta0eb4b7ff6c91bc31b185345e9057a85c7efcb12commit | diff
etc/config.tcl: Fix the validity duration for certificates.

I misremembered that the durations are measured in hours, not days.
But actually 28 hours isn't enough, because hosts refresh their cache
of the certificate store at different times of night: we must have the
new certificates ready for the early risers, and the old ones must
still be valid until time that the late risers are done.
etc/config.tcl diff | blob | blame | history
A simple X.509 certificate authority.