From 9bda3fda70912d73266a2dbac5470ca23d2ff6fd Mon Sep 17 00:00:00 2001
From: Carl Hetherington <cth@carlh.net>
Date: Sat, 12 Feb 2022 22:53:14 +0100
Subject: Go back to 10-year certificate validity periods (#2174).

---
 src/lib/config.cc | 1 +
 src/lib/util.h    | 1 +
 2 files changed, 2 insertions(+)

(limited to 'src/lib')

diff --git a/src/lib/config.cc b/src/lib/config.cc
index 0d70c16fc..abf0eb42b 100644
--- a/src/lib/config.cc
+++ b/src/lib/config.cc
@@ -204,6 +204,7 @@ Config::create_certificate_chain ()
 {
 	return make_shared<dcp::CertificateChain> (
 		openssl_path(),
+		CERTIFICATE_VALIDITY_PERIOD,
 		"dcpomatic.com",
 		"dcpomatic.com",
 		".dcpomatic.smpte-430-2.ROOT",
diff --git a/src/lib/util.h b/src/lib/util.h
index 10c5678ff..cbf4b491b 100644
--- a/src/lib/util.h
+++ b/src/lib/util.h
@@ -78,6 +78,7 @@ namespace dcp {
 /** Maximum size of the XML part of a closed caption file, according to SMPTE Bv2.1 */
 #define MAX_CLOSED_CAPTION_XML_SIZE (256 * 1024)
 #define MAX_CLOSED_CAPTION_XML_SIZE_TEXT "256KB"
+#define CERTIFICATE_VALIDITY_PERIOD (10 * 365)
 
 extern std::string program_name;
 extern bool is_batch_converter;
-- 
cgit v1.2.3