From 1fd3ac5d3ae341f194f87e57a50817c8b965b0d6 Mon Sep 17 00:00:00 2001 From: Niall Sheridan Date: Thu, 2 Jun 2016 21:55:35 +0100 Subject: Set an expiry on keys added to the agent --- cmd/cashier/main.go | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) (limited to 'cmd/cashier') diff --git a/cmd/cashier/main.go b/cmd/cashier/main.go index 768ebcd..3a34108 100644 --- a/cmd/cashier/main.go +++ b/cmd/cashier/main.go @@ -31,10 +31,12 @@ var ( ) func installCert(a agent.Agent, cert *ssh.Certificate, key key) error { + lifetime := time.Unix(int64(cert.ValidBefore), 0).Sub(time.Now()).Seconds() pubcert := agent.AddedKey{ - PrivateKey: key, - Certificate: cert, - Comment: cert.KeyId, + PrivateKey: key, + Certificate: cert, + Comment: cert.KeyId, + LifetimeSecs: uint32(lifetime), } if err := a.Add(pubcert); err != nil { return fmt.Errorf("error importing certificate: %s", err) -- cgit v1.2.3