From 9f1d95d8bfd5cf7673ce13104e2e69e4caaf461e Mon Sep 17 00:00:00 2001
From: Mariano Cano <mariano@smallstep.com>
Date: Thu, 7 May 2020 18:21:11 -0700
Subject: [PATCH] Fix renew of certificate at the start of the server.

---
 ca/renew.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/ca/renew.go b/ca/renew.go
index 13f96ff7..7d574748 100644
--- a/ca/renew.go
+++ b/ca/renew.go
@@ -51,6 +51,7 @@ func NewTLSRenewer(cert *tls.Certificate, fn RenewFunc, opts ...tlsRenewerOption
 	r := &TLSRenewer{
 		RenewCertificate: fn,
 		cert:             cert,
+		certNotAfter:     cert.Leaf.NotAfter.Add(-1 * time.Minute),
 	}
 
 	for _, f := range opts {