From 9472a0749fa87ce0c564be622ccdc6b1e532ed8d Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Mon, 16 Dec 2019 19:05:32 +0100
Subject: [PATCH] system: what sense would opnsense.cnf defaults make...

when they are ignored anyway.  :)
---
 src/etc/inc/plugins.inc.d/webgui.inc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/etc/inc/plugins.inc.d/webgui.inc b/src/etc/inc/plugins.inc.d/webgui.inc
index 2d5dc260f..61e909688 100644
--- a/src/etc/inc/plugins.inc.d/webgui.inc
+++ b/src/etc/inc/plugins.inc.d/webgui.inc
@@ -100,7 +100,7 @@ function webgui_configure_do($verbose = false, $interface = '')
                 /* XXX ought to be replaced by PHP calls */
                 '/usr/local/bin/openssl req -new -extensions server_cert ' .
                 '-config /usr/local/etc/ssl/opnsense.cnf ' .
-                '-newkey rsa:4096 -sha256 -nodes -x509 ' .
+                '-newkey rsa:4096 -sha256 -days 825 -nodes -x509 ' .
                 '-subj "/C=NL/ST=Zuid-Holland/L=Middelharnis/O=OPNsense" ' .
                 '-keyout /tmp/ssl.key -out /tmp/ssl.crt'
             );