From ab8978ba686b2228b8d0866e2a42d827b1bdf702 Mon Sep 17 00:00:00 2001
From: colben <colbenlee@gmail.com>
Date: Fri, 25 Nov 2022 11:38:33 +0800
Subject: [PATCH] update

---
 content/post/openvpn-install.md | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/content/post/openvpn-install.md b/content/post/openvpn-install.md
index 8e6b265..91b7c28 100644
--- a/content/post/openvpn-install.md
+++ b/content/post/openvpn-install.md
@@ -31,9 +31,13 @@ vpn 客户端 | vpn-client | CentOS7 | 192.168.1.91
     # vars 文件包含证书相关配置，可修改
     cp /usr/share/doc/easy-rsa-3.0.3/vars.example /opt/easy-rsa/vars
     ```
+- 修改 /opt/easy-rsa/pki/safessl-easyrsa.conf 中如下配置，增加证书有效时间为 10 年
+    ```
+    default_days    = 3650
+    default_crl_days= 3650
+    ```
 - 初始化 pki 目录结构
     ```bash
-    cd /opt/easy-rsa
     ./easyrsa init-pki
     ```
 - 生成免密 ca 证书