use max possible certificate age for user identities

This commit is contained in:
yggverse 2024-08-02 23:06:15 +03:00
parent 8c6627cfb8
commit c1f087e5ec

View file

@ -10,8 +10,8 @@ use \OpenSSLCertificate;
class Gemini extends \Yggverse\Yoda\Abstract\Model\Identity class Gemini extends \Yggverse\Yoda\Abstract\Model\Identity
{ {
// Update defaults // Init defaults
public const CSR_SIGN_DAYS = 365 * 1965; // @TODO public const CSR_SIGN_DATE = '99991231235959Z';
// Init identity variables // Init identity variables
protected OpenSSLAsymmetricKey $_key; protected OpenSSLAsymmetricKey $_key;
@ -32,7 +32,11 @@ class Gemini extends \Yggverse\Yoda\Abstract\Model\Identity
), ),
$this->_key, $this->_key,
null, null,
self::CSR_SIGN_DAYS intval( // use max possible certificate age for user identities
floor(
(strtotime(self::CSR_SIGN_DATE) - time()) / (60 * 60 * 24)
)
)
); );
} }