PKI max ttl

pki-max-ttl.sh

# setup pki
vault mount pki
vault mount-tune -max-lease-ttl=87600h pki
vault write pki/root/generate/internal common_name="Vault Testing Root Authority" ttl=87600h

# create role
vault write pki/roles/test allow_any_name=true enforce_hostnames=false max_ttl=1440h

# create certificate and read it
vault write -format=json pki/issue/test common_name=test ttl=1440h | \
  jq -r .data.certificate | \
  openssl x509 -noout -text | \
  grep "Not "