github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-13 13:55:41 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #118903 from champtar/revert-118631-ca-not-before

Browse Source 
Revert "Make CA valid 1 hour in the past"
This commit is contained in:
Kubernetes Prow Robot 2023-06-27 08:57:00 -07:00 committed by GitHub
commit b82240cfb0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
staging/src/k8s.io/client-go/util/cert/cert.go
View File

@ -71,7 +71,7 @@ func NewSelfSignedCACert(cfg Config, key crypto.Signer) (*x509.Certificate, erro
Organization: cfg.Organization, Organization: cfg.Organization,
}, },
DNSNames: []string{cfg.CommonName}, DNSNames: []string{cfg.CommonName},
NotBefore: now.Add(-time.Hour).UTC(), // valid an hour earlier to avoid flakes NotBefore: now.UTC(),
NotAfter: now.Add(duration365d * 10).UTC(), NotAfter: now.Add(duration365d * 10).UTC(),
KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign, KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,
BasicConstraintsValid: true, BasicConstraintsValid: true,