aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMaximilian Hils <git@maximilianhils.com>2020-04-08 09:17:22 +0200
committerGitHub <noreply@github.com>2020-04-08 09:17:22 +0200
commit3ebf112d6d7f7b3484d51e2ac51b593cd5b1a5bb (patch)
tree28039ecdf76368b07f6635aca1e7e17f9c83975a
parentfbe296aaba774b01348a55a6c9e10097bfd61b60 (diff)
parentab79bb0313d3bf7c5c1a5853baae176e87c59050 (diff)
downloadmitmproxy-3ebf112d6d7f7b3484d51e2ac51b593cd5b1a5bb.tar.gz
mitmproxy-3ebf112d6d7f7b3484d51e2ac51b593cd5b1a5bb.tar.bz2
mitmproxy-3ebf112d6d7f7b3484d51e2ac51b593cd5b1a5bb.zip
Merge pull request #3914 from mitmproxy/reduce-certificate-lifetime
Reduce leaf certificate lifetime to one year
-rw-r--r--mitmproxy/certs.py4
1 files changed, 2 insertions, 2 deletions
diff --git a/mitmproxy/certs.py b/mitmproxy/certs.py
index d574c027..a37d29bc 100644
--- a/mitmproxy/certs.py
+++ b/mitmproxy/certs.py
@@ -15,8 +15,8 @@ import OpenSSL
from mitmproxy.coretypes import serializable
# Default expiry must not be too long: https://github.com/mitmproxy/mitmproxy/issues/815
-DEFAULT_EXP = 94608000 # = 24 * 60 * 60 * 365 * 3
-DEFAULT_EXP_DUMMY_CERT = 63072000 # = 2 years
+DEFAULT_EXP = 94608000 # = 60 * 60 * 24 * 365 * 3 = 3 years
+DEFAULT_EXP_DUMMY_CERT = 31536000 # = 60 * 60 * 24 * 365 = 1 year
# Generated with "openssl dhparam". It's too slow to generate this on startup.
DEFAULT_DHPARAM = b"""