From: Mark Wooding <mdw@distorted.org.uk>
Date: Thu, 6 Dec 2012 03:21:15 +0000 (+0000)
Subject: etc/config.tcl: Move the re-issue time back to midnight.
X-Git-Url: https://git.distorted.org.uk/~mdw/ca/commitdiff_plain/00e8593b9d1fbacc38fe78077a1e6fc41606704f

etc/config.tcl: Move the re-issue time back to midnight.

We must reissue certificates early, because hosts stagger their update
of the certificate store throughout the night.
---

diff --git a/etc/config.tcl b/etc/config.tcl
index 84a7651..812b1d3 100644
--- a/etc/config.tcl
+++ b/etc/config.tcl
@@ -14,14 +14,14 @@ set C(ca-name) {
 
 set P(tls-client) {
   extensions tls-client-extensions
-  issue-time "*-*-* 03:00:00"
+  issue-time "*-*-* 00:00:00"
   start-skew 1
   expire-interval 32
 }
 
 set P(tls-server) {
   extensions tls-server-extensions
-  issue-time "*-*-* 03:00:00"
+  issue-time "*-*-* 00:00:00"
   start-skew 1
   expire-interval 32
 }