diff --git a/build/check_embedded.pl b/build/check_embedded.pl index ff11e2ee..45ce0141 100755 --- a/build/check_embedded.pl +++ b/build/check_embedded.pl @@ -21,6 +21,11 @@ # my $excessThreshold = 5; # years +# +# Number of days in the past we should regard as "long expired". +# +my $longExpiredDays = 30*3; # about three months + # # Load RSA key blacklists. # @@ -217,7 +222,7 @@ sub comment { $notAfter = $1; $notAfterTime = str2time($notAfter); $days = ($notAfterTime-time())/86400.0; - if ($days < -180) { + if ($days < -$longExpiredDays) { my $d = floor(-$days); error("EXPIRED LONG AGO ($d days; $notAfter)"); } elsif ($days < 0) {