Skip to main content

How to expire a Tailscale node key faster than the min expiry

  • Posted
  • Updated

Use tailscale debug set-expire --in=<duration>.

In normal use, you can’t set a node key to expire in less than 1 day, which is annoying if you want to test something quickly. (I wanted to test how the client behaves with expired node keys.)

There’s a convenient debug command that lets you set the key expiry to any duration, in particular short ones:

$ tailscale debug set-expire --in=10m

You can also set a negative number, to expire a key immediately:

$ tailscale debug set-expire --in=-1m