change root crl expiration to 4yr

kaysond · May 7, 2019 · 1ffec62 · 1ffec62
1 parent 24e1c98
commit 1ffec62
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/spki b/spki
@@ -647,7 +647,7 @@ write-root-conf () {
 	crlnumber         = \$dir/crlnumber
 	crl               = \$dir/crl/$ROOT_PREFIX.crl.pem
 	crl_extensions    = crl_ext
-	default_crl_days  = 30
+	default_crl_days  = 1460
 
 	# SHA-1 is deprecated, so use SHA-2 instead.
 	default_md        = sha256