summaryrefslogtreecommitdiffstats
path: root/krebs/5pkgs/simple/generate-krebs-intermediate-ca
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2021-12-10 09:55:47 +0100
committerlassulus <lassulus@lassul.us>2021-12-10 09:55:47 +0100
commite4384e10e94bc01507834568f2dfb4bd8255311f (patch)
tree87ebee1c72e392134e2bbcc7ec104d4b437ee5ef /krebs/5pkgs/simple/generate-krebs-intermediate-ca
parent42f9caa6f7c4fbc1b508b9e077be926ed12876c6 (diff)
pkgs.generate-krebs-intermediate-ca: set vailidy to 1y
Diffstat (limited to 'krebs/5pkgs/simple/generate-krebs-intermediate-ca')
-rw-r--r--krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix b/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix
index 8cec54327..5055a78aa 100644
--- a/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix
+++ b/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix
@@ -23,6 +23,7 @@ pkgs.writers.writeDashBin "generate-intermediate-ca" ''
${pkgs.step-cli}/bin/step certificate create "Krebs ACME CA" intermediate_ca.crt intermediate_ca.key \
--template "$TMPDIR/intermediate.tpl" \
+ --not-after 8760h \
--ca "$TMPDIR/krebs/ca.crt" \
--ca-key "$TMPDIR/krebs/ca.key" \
--no-password --insecure