Warn when a client cert is about to expire.

diff --git a/common/modules.conf b/common/modules.conf
index 1eebd0042ea6256db7e00288e0b92dc6ffd3aa2e..d6f3ffe6cebea51360507b21ed5faf8018edc22f 100644 (file)
--- a/common/modules.conf
+++ b/common/modules.conf
@@ -206,7 +206,8 @@
 <securelist exemptregistered="yes">
 
 <module name="sslinfo">
-<sslinfo hash="sha-256">
+<sslinfo hash="sha-256"
+         warnexpiring="2w">
 
 <module name="sslmodes">
 <sslmodes enableumode="yes">