Create certificates which last 68 years (INT32_MAX seconds)

This avoids integer overflow on 32-bit architectures.

1 files changed, 2 insertions, 1 deletions

diff --git a/src/tls.c b/src/tls.c
index a98dfe0..0e092d3 100644
--- a/src/tls.c
+++ b/src/tls.c
@@ -6,6 +6,7 @@
 #include <openssl/pem.h>
 #include <openssl/ssl.h>
 #include <openssl/x509v3.h>
+#include <stdint.h>
 #include <stdio.h>
 #include <string.h>
 #include <unistd.h>
@@ -44,7 +45,7 @@ tls_host_gencert(struct gmnisrv_tls *tlsconf, struct gmnisrv_host *host,
 	X509_set_version(x509, 2);
 	ASN1_INTEGER_set(X509_get_serialNumber(x509), 1);
 	X509_gmtime_adj(X509_get_notBefore(x509), 0);
-	X509_gmtime_adj(X509_get_notAfter(x509), LONG_MAX);
+	X509_gmtime_adj(X509_get_notAfter(x509), INT32_MAX); // 68 years
 	X509_set_pubkey(x509, pkey);
 
 	char *organization = "gmnisrv";