Issue certificates with NotBefore set 1 day prior to avoid timezone i…

…ssues in VM
kubernetes · May 21, 2018 · 208ea8f · 208ea8f
1 parent 2db576e
commit 208ea8f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/util/crypto.go b/pkg/util/crypto.go
@@ -44,7 +44,7 @@ func GenerateCACert(certPath, keyPath string, name string) error {
 		Subject: pkix.Name{
 			CommonName: name,
 		},
-		NotBefore: time.Now().Add(time.Hour * -1),
+		NotBefore: time.Now().Add(time.Hour * -24),
 		NotAfter:  time.Now().Add(time.Hour * 24 * 365 * 10),
 
 		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageCertSign,