dehydrated icon indicating copy to clipboard operation
dehydrated copied to clipboard
verified publisher icon dehydrated-io

Support custom certificate lifetime

Open janh opened this issue 1 year ago • 0 comments

The ACME protocol allows to request a specific lifetime using the fields "notBefore" and "notAfter" when creating an order (see also #806).

This change allows to specify the desired lifetime using the new LIFETIME_SECS option.

The "notBefore" time is back-dated by 1 hour (Let's Encrypt and Google Trust Services also do this by default). Not sure if this should also be configurable.

janh avatar Jan 09 '24 16:01 janh