mbiryukova/certificates
1
0
Fork 0
forked from TrueCloudLab/certificates
Code Pull requests Activity

Truncate to seconds to avoid rounding up times.

Browse source 
It can cause that certs are not valid yet, if they are used right away.
This commit is contained in:
Mariano Cano 2019-09-19 13:42:24 -07:00
parent adc1d54b0d
commit d59a5b222f
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
authority/provisioner/sign_ssh_options.go
View file

@ -216,7 +216,7 @@ func (m *sshCertificateValidityModifier) Modify(cert *ssh.Certificate) error {
}
if cert.ValidAfter == 0 {
cert.ValidAfter = uint64(now().Add(-1 * time.Minute).Unix())
cert.ValidAfter = uint64(now().Truncate(time.Second).Unix())
}
if cert.ValidBefore == 0 {
t := time.Unix(int64(cert.ValidAfter), 0)