docs(examples): reduce snakeoil cert days to 1yr
authorJavier Bértoli <javier@netmanagers.com.ar>
Mon, 7 Dec 2020 15:28:27 +0000 (12:28 -0300)
committerJavier Bértoli <javier@netmanagers.com.ar>
Mon, 7 Dec 2020 15:32:32 +0000 (12:32 -0300)
test/salt/states/examples/single_host/snakeoil_certs.sls

index 39ac2e54847458f58d477e22f1ec599881bf5d88..f6e69b83f0b88a94f7509ecd1302485d7af9fb68 100644 (file)
@@ -46,7 +46,7 @@ arvados_test_salt_states_examples_single_host_snakeoil_certs_arvados_snake_oil_c
                   <(printf "\n[x509_ext]\nbasicConstraints=critical,CA:true,pathlen:0\nkeyUsage=critical,keyCertSign,cRLSign")) \
           -out {{ arvados_ca_cert_file }} \
           -keyout {{ arvados_ca_key_file }} \
                   <(printf "\n[x509_ext]\nbasicConstraints=critical,CA:true,pathlen:0\nkeyUsage=critical,keyCertSign,cRLSign")) \
           -out {{ arvados_ca_cert_file }} \
           -keyout {{ arvados_ca_key_file }} \
-          -days 3650 && \
+          -days 365 && \
         cp {{ arvados_ca_cert_file }} {{ arvados_ca_cert_dest }} && \
         {{ update_ca_cert }}
     - unless:
         cp {{ arvados_ca_cert_file }} {{ arvados_ca_cert_dest }} && \
         {{ update_ca_cert }}
     - unless:
@@ -104,7 +104,7 @@ arvados_test_salt_states_examples_single_host_snakeoil_certs_arvados_snake_oil_c
         # The cert
         openssl x509 \
           -req \
         # The cert
         openssl x509 \
           -req \
-          -days 3650 \
+          -days 365 \
           -in {{ arvados_csr_file }} \
           -out {{ arvados_cert_file }} \
           -extfile /tmp/openssl.cnf \
           -in {{ arvados_csr_file }} \
           -out {{ arvados_cert_file }} \
           -extfile /tmp/openssl.cnf \