X-Git-Url: https://iankelling.org/git/?p=vpn-setup;a=blobdiff_plain;f=vpn-mk-client-cert;fp=vpn-mk-client-cert;h=bd946dd88341a8ba8197f056bf2f26a767bd02ca;hp=4e41bacf8297ba31f032d70c5e31ecafbec1e444;hb=45b747be876918d04c2013b9ba519a2770b61cd0;hpb=09079aab55c72708a3b5963557a144b3911b9f11

diff --git a/vpn-mk-client-cert b/vpn-mk-client-cert
index 4e41bac..bd946dd 100755
--- a/vpn-mk-client-cert
+++ b/vpn-mk-client-cert
@@ -105,4 +105,8 @@ remote-cert-tls server
 
 # more resilient when running as nonroot
 persist-key
+
+# see comments in server side configuration.
+# the minimum of the 2 is used.
+reneg-sec 2592000
 EOF