From 00e8593b9d1fbacc38fe78077a1e6fc41606704f Mon Sep 17 00:00:00 2001 From: Mark Wooding Date: Thu, 6 Dec 2012 03:21:15 +0000 Subject: [PATCH] etc/config.tcl: Move the re-issue time back to midnight. We must reissue certificates early, because hosts stagger their update of the certificate store throughout the night. --- etc/config.tcl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/config.tcl b/etc/config.tcl index 84a7651..812b1d3 100644 --- a/etc/config.tcl +++ b/etc/config.tcl @@ -14,14 +14,14 @@ set C(ca-name) { set P(tls-client) { extensions tls-client-extensions - issue-time "*-*-* 03:00:00" + issue-time "*-*-* 00:00:00" start-skew 1 expire-interval 32 } set P(tls-server) { extensions tls-server-extensions - issue-time "*-*-* 03:00:00" + issue-time "*-*-* 00:00:00" start-skew 1 expire-interval 32 } -- 2.11.0