Skip to content

Commit

Permalink
Parameterise "long ago" as applied to certificate expiry, and drop th…
Browse files Browse the repository at this point in the history
…e value from 180 days (six months) to 90 days (three months).
  • Loading branch information
iay committed Nov 29, 2012
1 parent 1d84583 commit 1e0f42b
Showing 1 changed file with 6 additions and 1 deletion.
7 changes: 6 additions & 1 deletion build/check_embedded.pl
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,11 @@
#
my $excessThreshold = 5; # years

#
# Number of days in the past we should regard as "long expired".
#
my $longExpiredDays = 30*3; # about three months

#
# Load RSA key blacklists.
#
Expand Down Expand Up @@ -217,7 +222,7 @@ sub comment {
$notAfter = $1;
$notAfterTime = str2time($notAfter);
$days = ($notAfterTime-time())/86400.0;
if ($days < -180) {
if ($days < -$longExpiredDays) {
my $d = floor(-$days);
error("EXPIRED LONG AGO ($d days; $notAfter)");
} elsif ($days < 0) {
Expand Down

0 comments on commit 1e0f42b

Please sign in to comment.