From b07822c575cb876f9af5389e1353acce7e19ce00 Mon Sep 17 00:00:00 2001
From: Jim Minter <jim-minter@users.noreply.github.com>
Date: Fri, 21 Aug 2015 12:04:48 +0100
Subject: Make CA lifetime 365 days, not 30

---
 roles/etcd_ca/tasks/main.yml | 1 +
 1 file changed, 1 insertion(+)

(limited to 'roles/etcd_ca')

diff --git a/roles/etcd_ca/tasks/main.yml b/roles/etcd_ca/tasks/main.yml
index ab151fe5b..8a266f732 100644
--- a/roles/etcd_ca/tasks/main.yml
+++ b/roles/etcd_ca/tasks/main.yml
@@ -37,6 +37,7 @@
     openssl req -config openssl.cnf -newkey rsa:4096
     -keyout ca.key -new -out ca.crt -x509 -extensions etcd_v3_ca_self
     -batch -nodes -subj /CN=etcd-signer@{{ ansible_date_time.epoch }}
+    -days 365
   args:
     chdir: "{{ etcd_ca_dir }}"
     creates: "{{ etcd_ca_dir }}/ca.crt"
-- 
cgit v1.2.3