diff options
| author | Rob Austein <sra@hactrn.net> | 2014-01-07 00:17:08 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2014-01-07 00:17:08 +0000 |
| commit | b90f5dbe8b9c283f8f8b2be775b99da2f0639976 (patch) | |
| tree | 6ca6d440738547d81d70cc0721a492a24e008667 /rpkid/rpki/rootd.py | |
| parent | 2e18229acf8433a6eac15165f8639d2b5652f6cc (diff) | |
Set notBefore value directly when issuing certificates to avoid race
condition when issuing new manifest EE certificate. See #662.
svn path=/trunk/; revision=5614
Diffstat (limited to 'rpkid/rpki/rootd.py')
| -rw-r--r-- | rpkid/rpki/rootd.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/rpkid/rpki/rootd.py b/rpkid/rpki/rootd.py index 7cfcb957..f9f2d254 100644 --- a/rpkid/rpki/rootd.py +++ b/rpkid/rpki/rootd.py @@ -215,6 +215,7 @@ class main(object): aia = self.rpki_root_cert_uri, crldp = self.rpki_base_uri + self.rpki_root_crl, resources = resources, + notBefore = now, notAfter = notAfter) self.set_subject_cert(subject_cert) self.generate_crl_and_manifest(now) @@ -250,6 +251,7 @@ class main(object): aia = self.rpki_root_cert_uri, crldp = self.rpki_base_uri + self.rpki_root_crl, resources = manifest_resources, + notBefore = now, notAfter = now + self.rpki_subject_lifetime, is_ca = False) manifest = rpki.x509.SignedManifest.build( |