Parameterise "long ago" as applied to certificate expiry, and drop th…

…e value from 180 days (six months) to 90 days (three months).
InCommon · Nov 29, 2012 · 1e0f42b · 1e0f42b
1 parent 1d84583
commit 1e0f42b
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/build/check_embedded.pl b/build/check_embedded.pl
@@ -21,6 +21,11 @@
 #
 my $excessThreshold = 5; # years
 
+#
+# Number of days in the past we should regard as "long expired".
+#
+my $longExpiredDays = 30*3; # about three months
+
 #
 # Load RSA key blacklists.
 #
@@ -217,7 +222,7 @@ sub comment {
 				$notAfter = $1;
 				$notAfterTime = str2time($notAfter);
 				$days = ($notAfterTime-time())/86400.0;
-				if ($days < -180) {
+				if ($days < -$longExpiredDays) {
 					my $d = floor(-$days);
 					error("EXPIRED LONG AGO ($d days; $notAfter)");
 				} elsif ($days < 0) {