From 6a4cc623148eb2e3ff2c6c0d61deea246710e783 Mon Sep 17 00:00:00 2001
From: "Eric D. Helms" <ericdhelms@gmail.com>
Date: Thu, 19 Jun 2014 15:06:14 -0400
Subject: [PATCH] Fixes #5599: Set cert expirations to 20 years by default.

---
 manifests/params.pp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/manifests/params.pp b/manifests/params.pp
index 1c91b292..a1ae5470 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -32,8 +32,8 @@
   $city          = 'Raleigh'
   $org           = 'SomeOrg'
   $org_unit      = 'SomeOrgUnit'
-  $expiration    = '365'
-  $ca_expiration = '36500'
+  $expiration    = '7300' # 20 years
+  $ca_expiration = '36500' # 100 years
 
   $keystore_password_file = 'keystore_password-file'
   $nss_db_dir = "${pki_dir}/nssdb"