Skip to content

Commit

Permalink
Update go/signedexchange/README.md (#474)
Browse files Browse the repository at this point in the history
Use `-days 90` when creating a self-signed certificate, as certificate
lifetime is limited to maximum 90 days. (#383)
  • Loading branch information
irori authored Jul 31, 2019
1 parent 5d96740 commit ce24b25
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion go/signedexchange/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,7 +40,7 @@ Here, we assume that you have an access to an HTTPS server capable of serving st
openssl req -new -sha256 -key priv.key -out cert.csr \
-subj '/CN=example.org/O=Test/C=US'
# Self-sign the certificate with "CanSignHttpExchanges" extension.
openssl x509 -req -days 360 -in cert.csr -signkey priv.key -out cert.pem \
openssl x509 -req -days 90 -in cert.csr -signkey priv.key -out cert.pem \
-extfile <(echo -e "1.3.6.1.4.1.11129.2.1.22 = ASN1:NULL\nsubjectAltName=DNS:example.org")
```

Expand Down

0 comments on commit ce24b25

Please sign in to comment.