From b07822c575cb876f9af5389e1353acce7e19ce00 Mon Sep 17 00:00:00 2001
From: Jim Minter <jim-minter@users.noreply.github.com>
Date: Fri, 21 Aug 2015 12:04:48 +0100
Subject: Make CA lifetime 365 days, not 30
---
roles/etcd_ca/tasks/main.yml | 1 +
1 file changed, 1 insertion(+)
(limited to 'roles/etcd_ca/tasks')
diff --git a/roles/etcd_ca/tasks/main.yml b/roles/etcd_ca/tasks/main.yml
index ab151fe5b..8a266f732 100644
--- a/roles/etcd_ca/tasks/main.yml
+++ b/roles/etcd_ca/tasks/main.yml
@@ -37,6 +37,7 @@
openssl req -config openssl.cnf -newkey rsa:4096
-keyout ca.key -new -out ca.crt -x509 -extensions etcd_v3_ca_self
-batch -nodes -subj /CN=etcd-signer@{{ ansible_date_time.epoch }}
+ -days 365
args:
chdir: "{{ etcd_ca_dir }}"
creates: "{{ etcd_ca_dir }}/ca.crt"
--
cgit v1.2.3