Default: renew 30 days before expiry, rather than 10

- gives more time for various fallback strategies if renewal doesn't work the
   first time
This commit is contained in:
Peter Eckersley
2016-01-09 15:15:05 -08:00
parent 684ff01124
commit 5b3bd890b7
+1 -1
View File
@@ -565,7 +565,7 @@ class RenewableCert(object): # pylint: disable=too-many-instance-attributes
return True
# Renewals on the basis of expiry time
interval = self.configuration.get("renew_before_expiry", "10 days")
interval = self.configuration.get("renew_before_expiry", "30 days")
expiry = crypto_util.notAfter(self.version(
"cert", self.latest_common_version()))
now = pytz.UTC.fromutc(datetime.datetime.utcnow())