Monis Khan 7e891e5d6c csr: correctly handle backdating of short lived certs ...

This change updates the backdating logic to only be applied to the
NotBefore date and not the NotAfter date when the certificate is
short lived. Thus when such a certificate is issued, it will not be
immediately expired.  Long lived certificates continue to have the
same lifetime as before.

Consolidated all certificate lifetime logic into the
PermissiveSigningPolicy.policy method.

Signed-off-by: Monis Khan <mok@vmware.com>

2021-06-23 15:36:11 -04:00

..

authority_test.go

csr: correctly handle backdating of short lived certs

2021-06-23 15:36:11 -04:00

authority.go

csr: correctly handle backdating of short lived certs

2021-06-23 15:36:11 -04:00

policies_test.go

…

policies.go

csr: correctly handle backdating of short lived certs

2021-06-23 15:36:11 -04:00