Fix TTL for issuing cert

This commit is contained in:
Fang-Pen Lin
2025-11-12 09:13:14 -08:00
parent 5a47ac3a9d
commit 7de071736e
2 changed files with 5 additions and 5 deletions
@@ -641,11 +641,12 @@ export const pkiAcmeServiceFactory = ({
notAfter: finalizingOrder.notAfter ? new Date(finalizingOrder.notAfter) : undefined,
validity: !finalizingOrder.notAfter
? {
// 47 days, the default TTL comes with Let's Encrypt
// TODO: read config from the profile to get the expiration time instead
ttl: (24 * 60 * 60 * 1000).toString()
ttl: `${47 * 24 * 60}m`
}
: // ttl is not used if notAfter is provided
({ ttl: "0" } as const),
({ ttl: "0m" } as const),
enrollmentType: EnrollmentType.ACME
});
// TODO: associate the certificate with the order