Skip to content

Commit bb87ad6

Browse files
MB-50249: Limit the lifetime of auto-generated certs by 824d
... in order to make testSSL.sh happy Change-Id: I392d999116b292001bfabb1c5d168afb395c79b2 Reviewed-on: https://review.couchbase.org/c/ns_server/+/168642 Well-Formed: Build Bot <[email protected]> Reviewed-by: Steve Watanabe <[email protected]> Tested-by: Timofey Barmin <[email protected]>
1 parent c3b0cbc commit bb87ad6

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

deps/gocode/src/generate_cert/generate_cert.go

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -104,11 +104,11 @@ func main() {
104104

105105
leafPKey, err := rsa.GenerateKey(rand.Reader, keyLength)
106106
mustNoErr(err)
107-
108107
leafTemplate := x509.Certificate{
109108
SerialNumber: big.NewInt(time.Now().UnixNano()),
110-
NotBefore: earlyNotBefore,
111-
NotAfter: earlyNotAfter,
109+
NotBefore: time.Now().AddDate(0, 0, -1),
110+
// testSSL.sh complains when certificate validity is longer than 824 days
111+
NotAfter: time.Now().AddDate(0, 0, 824),
112112
Subject: pkix.Name{
113113
CommonName: commonName,
114114
},

0 commit comments

Comments
 (0)