From dd344abc3189a59ffecd8a54bc90507d0d656cc5 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Mon, 7 Jul 2014 23:44:58 +0200
Subject: 'default_days' in openssl.cnf doesn't work, use -days instead.

---
 roles/common/files/usr/local/bin/genkeypair.sh | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

(limited to 'roles')

diff --git a/roles/common/files/usr/local/bin/genkeypair.sh b/roles/common/files/usr/local/bin/genkeypair.sh
index bf37686..dda0f28 100755
--- a/roles/common/files/usr/local/bin/genkeypair.sh
+++ b/roles/common/files/usr/local/bin/genkeypair.sh
@@ -160,7 +160,6 @@ if [ -z "$config" -a \( "$cmd" = x509 -o "$cmd" = csr \) ]; then
 		policy             = policy_anything
 		req_extensions     = v3_req
 		x509_extensions    = v3_req
-		default_days       = 3650
 
 		[ req_distinguished_name ]
 		organizationName       = Fripost
@@ -195,6 +194,6 @@ if [ "$cmd" = x509 -o "$cmd" = csr ]; then
         exit 1
     else
         [ "$cmd" = x509 ] && x509=-x509 || x509=
-        openssl req -config "$config" -new $x509 ${hash:+-$hash} -key "$privkey" >"$pubkey" || exit 2
+        openssl req -config "$config" -new $x509 ${hash:+-$hash} -days 3650 -key "$privkey" >"$pubkey" || exit 2
     fi
 fi
-- 
cgit v1.2.3