Icinga / Icinga/icinga2

Lower leaf cert validity 397 -> 47 days

Open Beginner friendly
#10,437 5 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

area/distributed good first issue
Dominant language
C++
Stars
2.2k
Forks
616
Avg merge
5d 6h
Merged PRs (30d)
10

Description

Is your feature request related to a problem? Please describe.

  • The CA/Browser-Forum requires this, so #9179 is not enough anymore.

Describe the solution you'd like

  • The change to LEAF_VALID_FOR itself is a one-liner, #9179 already prepared this.

Describe alternatives you've considered

  1. Lower leaf cert validity 397 -> 200 days in a .0 version
  2. Lower leaf cert validity 200 -> 100 days in a .0 version
  3. Lower leaf cert validity 100 -> 47 days in a .0 version

Additional context

https://www.heise.de/news/47-Tage-CAs-und-Browserhersteller-beschliessen-kuerzere-Laufzeit-fuer-Zertifikate-10352867.html?utm_source=chatgpt.com

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the one-line LEAF_VALID_FOR change prepared in #9179 and locate that constant in the repository. Update its value from 397 to 47 days, then verify that generated leaf certificates use the new validity period and that relevant checks still pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
security
Issue type
Feature
Difficulty
1/5
Estimated time
Under an hour
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
78/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.