From 6df814790b00e4d9aa20632ba829a3d6cb3cc05e Mon Sep 17 00:00:00 2001 From: Bel LaPointe Date: Sat, 13 Oct 2018 19:23:05 -0600 Subject: [PATCH] whatever --- openssl.sh | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/openssl.sh b/openssl.sh index 99b8d69..7b43eaa 100644 --- a/openssl.sh +++ b/openssl.sh @@ -25,7 +25,7 @@ if ((doserver)); then echo 1 openssl genrsa -out $cakey 4096 echo 2 - openssl req -nodes -new -x509 -days 365 -key $cakey -out $cacrt \ + openssl req -nodes -new -x509 -days 3650 -key $cakey -out $cacrt \ -subj "/C=US/ST=UT/O=breel/CN=${host}" \ -reqexts SAN -extensions SAN -config <(cat /etc/ssl/openssl.cnf \ <(printf "\n[SAN]\nsubjectAltName=DNS:${host},DNS:*.${host}")) @@ -45,8 +45,9 @@ if ((doclient)); then # self-signed echo 5 - openssl x509 -req -days 365 -in $clientcsr -CA $cacrt -CAkey $cakey \ + openssl x509 -req -days 3650 -in $clientcsr -CA $cacrt -CAkey $cakey \ -set_serial 01 -out $clientcrt + rm $clientcsr fi if ((doserver)); then