Skip to content

bootstrap_mtc_worker: account for inclusive validity endpoints - #278

Merged
lukevalenta merged 1 commit into
mainfrom
lvalenta/fix-bootstrap-mtc-validity
Aug 25, 2026
Merged

bootstrap_mtc_worker: account for inclusive validity endpoints#278
lukevalenta merged 1 commit into
mainfrom
lvalenta/fix-bootstrap-mtc-validity

Conversation

@lukevalenta

Copy link
Copy Markdown
Contributor

X.509 notBefore and notAfter are inclusive. Account for this when deriving the certificate validity period so the configured seven-day maximum does not produce certificates valid for seven days and one second.

@lukevalenta
lukevalenta marked this pull request as ready for review August 25, 2026 14:00
@lukevalenta
lukevalenta merged commit e532068 into main Aug 25, 2026
9 checks passed
@lukevalenta
lukevalenta deleted the lvalenta/fix-bootstrap-mtc-validity branch August 25, 2026 14:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants