etc/config.sh: Allow a little slack in the validity timing.

[ssh-ca] / etc / config.sh

diff --git a/etc/config.sh b/etc/config.sh
index db7627d..62875f4 100644 (file)
--- a/etc/config.sh
+++ b/etc/config.sh
@@ -9,7 +9,7 @@
 keytypes="rsa:3072 dsa:1024"
 domain="distorted.org.uk"
 cacomment="ssh-ca@$domain"
-validity="-1d:+2d"
+validity="-1d:+2d1h"
 publish_target="vampire.distorted.org.uk:/var/www/ssh-ca/"
 
 ## GnuPG defaults.