search

candlerb / sshtokenca

An ssh server forwarding agent certificate authority
Other
0 stars 0 forks source link

use time parsing library for validity #4

Closed candlerb closed 4 years ago

candlerb commented 4 years ago

Allow certificate validity to be specified as a string, e.g. "12h"

Also allow longer periods than 24h - it's a policy decision as to what's an appropriate certificate lifetime. e.g. in cases using ssh certs while only having intermittent connectivity to the CA.