From d01c4365802388a9cb8f9d94ef7b4e6e824c5f4a Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Sun, 9 Apr 2017 23:18:54 +0000
Subject: [PATCH] SSH does not know years

Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
---
 roles/base/tasks/sshcerts.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/base/tasks/sshcerts.yml b/roles/base/tasks/sshcerts.yml
index 291f0cbff9..905ed88871 100644
--- a/roles/base/tasks/sshcerts.yml
+++ b/roles/base/tasks/sshcerts.yml
@@ -83,7 +83,7 @@
 - name: Set some extra signing facts
   set_fact:
     sign_hostnames: "{{ssh_hostnames}} + ['{{inventory_hostname}}']"
-    sign_validity: "-1h:+1y"
+    sign_validity: "-1h:+52w"
   when: env == "staging"
   tags:
   - sshd_config