mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-08 12:28:54 +00:00
misc: shortened cert expiry
This commit is contained in:
@@ -471,7 +471,7 @@ export const gatewayV2ServiceFactory = ({
|
|||||||
|
|
||||||
const gatewayServerKeys = await crypto.nativeCrypto.subtle.generateKey(alg, true, ["sign", "verify"]);
|
const gatewayServerKeys = await crypto.nativeCrypto.subtle.generateKey(alg, true, ["sign", "verify"]);
|
||||||
const gatewayServerCertIssuedAt = new Date();
|
const gatewayServerCertIssuedAt = new Date();
|
||||||
const gatewayServerCertExpireAt = new Date(new Date().setMonth(new Date().getMonth() + 1));
|
const gatewayServerCertExpireAt = new Date(new Date().setDate(new Date().getDate() + 1));
|
||||||
const gatewayServerCertPrivateKey = crypto.nativeCrypto.KeyObject.from(gatewayServerKeys.privateKey);
|
const gatewayServerCertPrivateKey = crypto.nativeCrypto.KeyObject.from(gatewayServerKeys.privateKey);
|
||||||
|
|
||||||
const gatewayServerCertExtensions: x509.Extension[] = [
|
const gatewayServerCertExtensions: x509.Extension[] = [
|
||||||
|
|||||||
@@ -625,7 +625,7 @@ export const relayServiceFactory = ({
|
|||||||
|
|
||||||
const relayServerKeys = await crypto.nativeCrypto.subtle.generateKey(alg, true, ["sign", "verify"]);
|
const relayServerKeys = await crypto.nativeCrypto.subtle.generateKey(alg, true, ["sign", "verify"]);
|
||||||
const relayServerCertIssuedAt = new Date();
|
const relayServerCertIssuedAt = new Date();
|
||||||
const relayServerCertExpireAt = new Date(new Date().setMonth(new Date().getMonth() + 1));
|
const relayServerCertExpireAt = new Date(new Date().setDate(new Date().getDate() + 1));
|
||||||
const relayServerCertPrivateKey = crypto.nativeCrypto.KeyObject.from(relayServerKeys.privateKey);
|
const relayServerCertPrivateKey = crypto.nativeCrypto.KeyObject.from(relayServerKeys.privateKey);
|
||||||
|
|
||||||
const relayServerCertExtensions: x509.Extension[] = [
|
const relayServerCertExtensions: x509.Extension[] = [
|
||||||
@@ -804,7 +804,7 @@ export const relayServiceFactory = ({
|
|||||||
keyId: `client-${relayName}`,
|
keyId: `client-${relayName}`,
|
||||||
principals: [gatewayId],
|
principals: [gatewayId],
|
||||||
certType: SshCertType.USER,
|
certType: SshCertType.USER,
|
||||||
requestedTtl: "30d"
|
requestedTtl: "1d"
|
||||||
});
|
});
|
||||||
|
|
||||||
return {
|
return {
|
||||||
|
|||||||
Reference in New Issue
Block a user