cloudtools / ssh-cert-authority

An implementation of an SSH certificate authority.
BSD 2-Clause "Simplified" License
728 stars 71 forks source link

Allow specifying a maximum certificate lifetime #10

Closed bobveznat closed 9 years ago

bobveznat commented 9 years ago

A new signerd configuration option for limiting the maximum lifetime of a requested certificate. This allows you to enforce policies that are, for example, "never issue a certificate that is valid for more than 2 days."

By default there is no limit (max lifetime of 0).

This change is in preparation for creating a truly self-service portal. One that can auto-sign certificates without requiring any approvals.