update default CSR_SIGN_DAYS value

This commit is contained in:
yggverse 2024-08-03 01:19:20 +03:00
parent 82bdf211d6
commit 62cb6d2249

View file

@ -14,7 +14,11 @@ use \OpenSSLCertificateSigningRequest;
*/ */
interface Identity interface Identity
{ {
public const CSR_SIGN_DAYS = 365; /*
* Industry standards recommend limiting the validity period of public SSL/TLS certificates to 397 days.
* This is a guideline default value provided by the CA/B Forum to improve security and manage risk.
*/
public const CSR_SIGN_DAYS = 397;
public const PRIVATE_KEY_BITS = 2048; public const PRIVATE_KEY_BITS = 2048;
public const PRIVATE_KEY_TYPE = OPENSSL_KEYTYPE_RSA; public const PRIVATE_KEY_TYPE = OPENSSL_KEYTYPE_RSA;