certs: No default not_before

Dstack-TEE · Jan 2, 2025 · 440f860 · 440f860
1 parent 74fc835
commit 440f860
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/ra-tls/src/cert.rs b/ra-tls/src/cert.rs
@@ -129,7 +129,9 @@ impl CertRequest<'_> {
                 params.is_ca = IsCa::Ca(BasicConstraints::Constrained(ca_level));
             }
         }
-        params.not_before = self.not_before.unwrap_or_else(SystemTime::now).into();
+        if let Some(not_before) = self.not_before {
+            params.not_before = not_before.into();
+        }
         params.not_after = self
             .not_after
             .unwrap_or_else(|| {