certificate renewal time

2022-04-07 06:22:24 +00:00 · 2022-04-07 06:22:24 +00:00 · dcce31da0b
commit dcce31da0b
parent 047b565331
1 changed files with 3 additions and 0 deletions
--- a/api/kiwi_vpn_api/easyrsa.py
+++ b/api/kiwi_vpn_api/easyrsa.py
@ -312,6 +312,9 @@ class EasyRSA:
            dn.common_name,
            "nopass",

+            # allow renewal 14 days before cert expiry
+            EASYRSA_CERT_RENEW="14",
+
            **dn.easyrsa_env,
        )