From dcce31da0b5b0bbfcc6464a66950626265d658f0 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rn-Michael=20Miehe?=
 <40151420+ldericher@users.noreply.github.com>
Date: Thu, 7 Apr 2022 06:22:24 +0000
Subject: [PATCH] certificate renewal time

---
 api/kiwi_vpn_api/easyrsa.py | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/api/kiwi_vpn_api/easyrsa.py b/api/kiwi_vpn_api/easyrsa.py
index 25c59cb..a83bbda 100644
--- a/api/kiwi_vpn_api/easyrsa.py
+++ b/api/kiwi_vpn_api/easyrsa.py
@@ -312,6 +312,9 @@ class EasyRSA:
             dn.common_name,
             "nopass",
 
+            # allow renewal 14 days before cert expiry
+            EASYRSA_CERT_RENEW="14",
+
             **dn.easyrsa_env,
         )