From ebac88e6b2d179d51528ef6338309bb06cb316c9 Mon Sep 17 00:00:00 2001 From: Andrey Arapov Date: Sat, 30 Jun 2018 21:29:03 +0200 Subject: [PATCH] updates --- README.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/README.md b/README.md index 12abfe7..8a1ece9 100644 --- a/README.md +++ b/README.md @@ -41,16 +41,16 @@ self-signed CA. > https://golang.org/src/crypto/x509/root_linux.go ## Script logic - - generate CA cert if does not find any. - - always generate server cert on startup to ensure all IP addresses are in - x509 SAN. - - warn if the CA cert about to expire (<30 days till expiration). - - regenerate the CA cert if it finds it has expired. + - generate CA certificate if does not find any + - always generate server certificate on startup to ensure all IP addresses + are in x509 SAN + - warn if the CA certificate is about to expire (<30 days till expiration) + - regenerate the CA certificate if it finds it has expired ## Notes - - The CA cert will be valid for 3650 days (10 years). - - The server cert will be valid for 365 days (1 year). - - The x509 certs are ECDSA with prime256v1 curve and SHA256 signatures. + - The CA certificate will be valid for 3650 days (10 years) + - The server certifcate will be valid for 365 days (1 year) + - The x509 certs are ECDSA with prime256v1 curve and SHA256 signatures ## Testing