Fix date overflow in new CA certificates, make them valid until 2038,

thanks to JP Vossen for reporting this.

1 files changed, 2 insertions, 2 deletions

diff --git a/bin/bbstored/bbstored-certs.in b/bin/bbstored/bbstored-certs.in
index e0554d94..85560748 100755
--- a/bin/bbstored/bbstored-certs.in
+++ b/bin/bbstored/bbstored-certs.in
@@ -1,8 +1,8 @@
 #!@PERL@
 use strict;
 
-# validity period for root certificates -- default is a very long time
-my $root_sign_period = '10000';
+# validity period for root certificates -- default is 2038, the best we can do for now
+my $root_sign_period = int(((1<<31) - time()) / 86400);
 
 # but less so for client certificates
 my $sign_period = '5000';