etc/config.sh: Allow a little slack in the validity timing.

[ssh-ca] / etc / config.sh

diff --git a/etc/config.sh b/etc/config.sh
index db7627d052a92b54f330a963f512d74aeeb0cd8a..62875f46dfefa3c74158fb173c39e350c3734369 100644 (file)
--- a/etc/config.sh
+++ b/etc/config.sh
@@ -9,7 +9,7 @@
 keytypes="rsa:3072 dsa:1024"
 domain="distorted.org.uk"
 cacomment="ssh-ca@$domain"
-validity="-1d:+2d"
+validity="-1d:+2d1h"
 publish_target="vampire.distorted.org.uk:/var/www/ssh-ca/"
 
 ## GnuPG defaults.