Certificates are now only valid for 24 hours.

9 years ago · a87edf4cc1
parent ccf1511ee5
commit a87edf4cc1
1 changed files with 1 additions and 0 deletions
--- a/dnscrypt-wrapper.sh
+++ b/dnscrypt-wrapper.sh
@ -24,6 +24,7 @@ new_key() {
        --provider-secretkey-file="${KEYS_DIR}/secret.key" \
        --crypt-secretkey-file="${STKEYS_DIR}/${ts}.key" \
        --provider-cert-file="${STKEYS_DIR}/${ts}.cert" && \
+        --cert-file-expire-days=1 && \
    mv -f "${STKEYS_DIR}/${ts}.cert" "${STKEYS_DIR}/dnscrypt.cert"
 }