etc/config.tcl: Don't reissue long-term certificates daily.

We end up with a huuuge pile of unnecessary certificates.

diff --git a/etc/config.tcl b/etc/config.tcl
index 3b901fc..ad98137 100644 (file)
--- a/etc/config.tcl
+++ b/etc/config.tcl
@@ -28,7 +28,7 @@ set P(tls-server) {
 
 set P(tls-server-longterm) {
   extensions tls-server-extensions
-  issue-time "*-*-* 00:00:00"
+  issue-time "*-03-01 00:00:00"
   start-skew 1
   expire-interval 43838
 }