[ca] Document generating CRL valid for longer than 30 days.

diff --git a/ca/README b/ca/README
index d3d6c81ca9e355080e6d3059491a1d1d7dab9df8..3b3071a4938d260c656cd235a0d84b93d6c9314f 100644 (file)
--- a/ca/README
+++ b/ca/README
@@ -12,7 +12,8 @@ instance of `.crt` [1].
 ```
 $ sudo --preserve-env openssl req -x509 -config ca.cnf -new -days 3650 -sha256 \
     -newkey rsa:4096 -keyout private/ca.key -out ca.pem
-$ sudo --preserve-env openssl ca -gencrl -config ca.cnf -out crlfile
+$ sudo --preserve-env openssl ca -gencrl -crldays 3650 -config ca.cnf \
+    -out crlfile
 $ sudo --preserve-env sh -c "cat ca.pem >> ca.crl"
 $ sudo --preserve-env sh -c "cat crlfile >> ca.crl"
 ```