Renew dir-maxpath certs every 4000 years

The original 10 years have run out.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine
2026-07-02 19:34:17 +02:00
parent e79f4fdd48
commit 709a794a34
+2 -1
View File
@@ -8,7 +8,8 @@ set -eu
: ${OPENSSL:=openssl}
NB=20
OPT="-days 3653 -sha256"
# Good for 4000 years. Good luck if it runs out!
OPT="-days 1460970 -sha256"
# generate self-signed root
$OPENSSL ecparam -name prime256v1 -genkey -out 00.key