From b91d69d1ede9d66a7a24d7fe555d33c9ca4d7574 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Sun, 9 Apr 2017 23:22:25 +0000
Subject: [PATCH] Make explicitly invalid

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/base/tasks/sshcerts.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/base/tasks/sshcerts.yml b/roles/base/tasks/sshcerts.yml
index 905ed88871..982fba8745 100644
--- a/roles/base/tasks/sshcerts.yml
+++ b/roles/base/tasks/sshcerts.yml
@@ -83,7 +83,7 @@
 - name: Set some extra signing facts
   set_fact:
     sign_hostnames: "{{ssh_hostnames}} + ['{{inventory_hostname}}']"
-    sign_validity: "-1h:+52w"
+    sign_validity: "-1h:+52w5y"
   when: env == "staging"
   tags:
   - sshd_config