From e4384e10e94bc01507834568f2dfb4bd8255311f Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Fri, 10 Dec 2021 09:55:47 +0100
Subject: [PATCH] pkgs.generate-krebs-intermediate-ca: set vailidy to 1y

---
 krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix b/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix
index 8cec54327..5055a78aa 100644
--- a/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix
+++ b/krebs/5pkgs/simple/generate-krebs-intermediate-ca/default.nix
@@ -23,6 +23,7 @@ pkgs.writers.writeDashBin "generate-intermediate-ca" ''
 
   ${pkgs.step-cli}/bin/step certificate create "Krebs ACME CA" intermediate_ca.crt intermediate_ca.key \
     --template "$TMPDIR/intermediate.tpl" \
+    --not-after 8760h \
     --ca "$TMPDIR/krebs/ca.crt" \
     --ca-key "$TMPDIR/krebs/ca.key" \
     --no-password --insecure