Make valid_until mandatory in left-right protocol, and reflect

resulting validity interval in generated certs.

svn path=/scripts/biz-certs/Bob-CA.srl; revision=1287

1 files changed, 6 insertions, 1 deletions

diff --git a/scripts/testroot.py b/scripts/testroot.py
index 762a1757..f92cd24a 100755
--- a/scripts/testroot.py
+++ b/scripts/testroot.py
@@ -13,11 +13,15 @@ Default configuration file is testroot.conf, override with --config option.
 import traceback, os, time, getopt, sys, lxml
 import rpki.resource_set, rpki.up_down, rpki.left_right, rpki.x509
 import rpki.https, rpki.config, rpki.cms, rpki.exceptions, rpki.relaxng
+import rpki.sundial
 
 root_name = "wombat"
 root_base = "rsync://" + root_name + ".invalid/"
 root_cert = root_base + "testroot.cer"
 
+rpki_subject_lifetime = rpki.sundial.timedelta(days = 30)
+
+
 def get_subject_cert():
   try:
     x = rpki.x509.X509(Auto_file = rpki_subject_filename)
@@ -71,7 +75,8 @@ class issue_pdu(rpki.up_down.issue_pdu):
                                          sia = req_sia,
                                          aia = root_cert,
                                          crldp = crldp,
-                                         resources = resources))
+                                         resources = resources,
+                                         notAfter = rpki.sundial.datetime.utcnow() + rpki_subject_lifetime))
     compose_response(r_msg)
 
 class revoke_pdu(rpki.up_down.revoke_pdu):