From: Ian Kelling <iank@fsf.org>
Date: Mon, 18 Dec 2023 21:02:08 +0000 (-0500)
Subject: make keys last 10 years instead of 3
X-Git-Url: https://iankelling.org/git/?p=vpn-setup;a=commitdiff_plain;h=73e9a029aef15f4135a9ed79d334cc7dde68227e

make keys last 10 years instead of 3
---

diff --git a/vpn-server-setup b/vpn-server-setup
index a4b203b..0f2670f 100755
--- a/vpn-server-setup
+++ b/vpn-server-setup
@@ -143,7 +143,7 @@ if ! $keys_exist; then
     echo 'set_var EASYRSA_NS_SUPPORT      "yes"' >vars
     ./easyrsa init-pki
     ./easyrsa --batch build-ca nopass
-    ./easyrsa build-server-full $name nopass
+    ./easyrsa --days=3650 build-server-full $name nopass
   else
     # dun care about settning cert cn etc from the non-example values
     source vars