Use sane certificate lifetimes

This commit is contained in:
David Ames
2019-03-07 10:00:24 -08:00
parent 6877038f4c
commit fe61149915
+2 -2
View File
@@ -94,10 +94,10 @@ def generate_cert(common_name,
cryptography.x509.oid.NameOID.COMMON_NAME, issuer_name),
]))
builder = builder.not_valid_before(
datetime.datetime.today() - datetime.timedelta(1, 0, 0),
datetime.datetime.today() - datetime.timedelta(0, 1, 0),
)
builder = builder.not_valid_after(
datetime.datetime.today() + datetime.timedelta(1, 0, 0),
datetime.datetime.today() + datetime.timedelta(30, 0, 0),
)
builder = builder.serial_number(cryptography.x509.random_serial_number())
builder = builder.public_key(public_key)