From: Mark Wooding <mdw@distorted.org.uk>
Date: Thu, 14 May 2020 12:45:58 +0000 (+0100)
Subject: etc/config.tcl: Don't reissue long-term certificates daily.
X-Git-Url: https://git.distorted.org.uk/~mdw/ca/commitdiff_plain/4e62e2005e4f253e988a3e8b15486f23b606f207

etc/config.tcl: Don't reissue long-term certificates daily.

We end up with a huuuge pile of unnecessary certificates.
---

diff --git a/etc/config.tcl b/etc/config.tcl
index 3b901fc..ad98137 100644
--- a/etc/config.tcl
+++ b/etc/config.tcl
@@ -28,7 +28,7 @@ set P(tls-server) {
 
 set P(tls-server-longterm) {
   extensions tls-server-extensions
-  issue-time "*-*-* 00:00:00"
+  issue-time "*-03-01 00:00:00"
   start-skew 1
   expire-interval 43838
 }