<![CDATA[Change Certificate Manager Default Internal Certificate Lifetime]]>As title.

Is there a way to change the default Certificate Lifetime for new certs in Certificate Manager from 3650 days to another value?

I've poured through the General & Advanced settings and cannot find anything obvious. If it's a Tunable, can someone advise the name & value?

]]>https://forum.netgate.com/topic/133769/change-certificate-manager-default-internal-certificate-lifetimeRSS for NodeWed, 15 Apr 2026 19:02:24 GMTTue, 14 Aug 2018 08:52:04 GMT60<![CDATA[Reply to Change Certificate Manager Default Internal Certificate Lifetime on Tue, 14 Aug 2018 09:23:53 GMT]]>You would have to edit php file used when creating cert..

https://github.com/pfsense/pfsense/blob/master/src/usr/local/www/system_certmanager.php

if ($act == "new") {
	$pconfig['method'] = $_POST['method'];
	$pconfig['keylen'] = "2048";
	$pconfig['digest_alg'] = "sha256";
	$pconfig['csr_keylen'] = "2048";
	$pconfig['csr_digest_alg'] = "sha256";
	$pconfig['csrsign_digest_alg'] = "sha256";
	$pconfig['type'] = "user";
	$pconfig['lifetime'] = "3650";
}

Keep in mind that would be reverted every time you updated pfsense and that file gets redone, etc.

]]>https://forum.netgate.com/post/782912https://forum.netgate.com/post/782912Tue, 14 Aug 2018 09:23:53 GMT