set an actual NotBefore time on the certificate

libp2p · Nov 23, 2021 · 22da1a4 · 22da1a4
1 parent c248f7a
commit 22da1a4
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/crypto.go b/crypto.go
@@ -194,7 +194,7 @@ func keyToCertificate(sk ic.PrivKey) (*tls.Certificate, error) {
 	}
 	tmpl := &x509.Certificate{
 		SerialNumber: sn,
-		NotBefore:    time.Time{},
+		NotBefore:    time.Now().Add(-time.Hour),
 		NotAfter:     time.Now().Add(certValidityPeriod),
 		// According to RFC 3280, the issuer field must be set,
 		// see https://datatracker.ietf.org/doc/html/rfc3280#section-4.1.2.4.