v3.3.0 — Long-lived user-certificate TTL presets
Adds longer validity presets to the Issue User Certificate capability editor.
Added
- TTL presets +1m, +3m, +6m, +1y, +5y, +10y (alongside the existing +1h / +1d / +1w).
- Raised the shared SSH certificate validity cap from ~3 years to ~10 years so the
+5y / +10y presets validate (the cap is shared with host certs too).
Note
Short TTLs remain the primary revocation mechanism — a multi-year user certificate
weakens that model. The long-lived presets are opt-in; prefer short TTLs + the KRL kill
switch where you can.
Docker images
ghcr.io/oriolrius/pki-manager-web/backend:3.3.0ghcr.io/oriolrius/pki-manager-web/frontend:3.3.0
Full changelog: v3.2.0...v3.3.0