summaryrefslogtreecommitdiff
path: root/etc/ca.conf
diff options
context:
space:
mode:
authorErich Eckner <git@eckner.net>2019-12-09 10:17:13 +0100
committerErich Eckner <git@eckner.net>2019-12-09 10:17:13 +0100
commitb6b7550ccbe694bfd81bfdb216d688c291930351 (patch)
treef6b9147b30689826c712bc6c294a9cdda476a2ea /etc/ca.conf
parent7764d70477823876fdebb9dcd7586d26beeee80c (diff)
downloadsimple-pki-b6b7550ccbe694bfd81bfdb216d688c291930351.tar.xz
sign-request.in: use the old ca for some time (the new ca may need some time to circulate to clients)
Diffstat (limited to 'etc/ca.conf')
-rw-r--r--etc/ca.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/etc/ca.conf b/etc/ca.conf
index aa8b4ba..2dccb42 100644
--- a/etc/ca.conf
+++ b/etc/ca.conf
@@ -3,6 +3,9 @@
# how long do we keep the old signature of the root-ca (days)
ca_keep_duration=60
+# how long do we wait before using the new root-ca (days)
+ca_min_duration=10
+
# which system user owns the ca
ca_user='erich'