From b6b7550ccbe694bfd81bfdb216d688c291930351 Mon Sep 17 00:00:00 2001
From: Erich Eckner <git@eckner.net>
Date: Mon, 9 Dec 2019 10:17:13 +0100
Subject: sign-request.in: use the old ca for some time (the new ca may need
 some time to circulate to clients)

---
 etc/ca.conf | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'etc/ca.conf')

diff --git a/etc/ca.conf b/etc/ca.conf
index aa8b4ba..2dccb42 100644
--- a/etc/ca.conf
+++ b/etc/ca.conf
@@ -3,6 +3,9 @@
 # how long do we keep the old signature of the root-ca (days)
 ca_keep_duration=60
 
+# how long do we wait before using the new root-ca (days)
+ca_min_duration=10
+
 # which system user owns the ca
 ca_user='erich'
 
-- 
cgit v1.2.3-70-g09d2