Use current time 2019 year to test old certificate

rarimo · Jun 25, 2024 · c0e80a4 · c0e80a4
1 parent 672d041
commit c0e80a4
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/service/api/handlers/create_identity.go b/internal/service/api/handlers/create_identity.go
@@ -486,7 +486,8 @@ func validateCert(cert *x509.Certificate, masterCertsPem []byte) error {
 	roots.AppendCertsFromPEM(masterCertsPem)
 
 	foundCerts, err := cert.Verify(x509.VerifyOptions{
-		Roots: roots,
+		Roots:       roots,
+		CurrentTime: time.Unix(1561467563, 0), // Tuesday, June 25, 2019 12:59:23
 	})
 	if err != nil {
 		return fmt.Errorf("invalid certificate: %w", err)