From a87edf4cc1ea61f88fd982d0865871422548efcc Mon Sep 17 00:00:00 2001
From: Frank Denis <github@pureftpd.org>
Date: Mon, 6 Jul 2015 02:10:51 +0200
Subject: [PATCH] Certificates are now only valid for 24 hours.

---
 dnscrypt-wrapper.sh | 1 +
 1 file changed, 1 insertion(+)

diff --git a/dnscrypt-wrapper.sh b/dnscrypt-wrapper.sh
index ddc03e5..ac574c1 100755
--- a/dnscrypt-wrapper.sh
+++ b/dnscrypt-wrapper.sh
@@ -24,6 +24,7 @@ new_key() {
         --provider-secretkey-file="${KEYS_DIR}/secret.key" \
         --crypt-secretkey-file="${STKEYS_DIR}/${ts}.key" \
         --provider-cert-file="${STKEYS_DIR}/${ts}.cert" && \
+        --cert-file-expire-days=1 && \
     mv -f "${STKEYS_DIR}/${ts}.cert" "${STKEYS_DIR}/dnscrypt.cert"
 }