4 Commits

Author	SHA1	Message	Date
Monis Khan	7e891e5d6c	csr: correctly handle backdating of short lived certs ... This change updates the backdating logic to only be applied to the NotBefore date and not the NotAfter date when the certificate is short lived. Thus when such a certificate is issued, it will not be immediately expired. Long lived certificates continue to have the same lifetime as before. Consolidated all certificate lifetime logic into the PermissiveSigningPolicy.policy method. Signed-off-by: Monis Khan <mok@vmware.com>	2021-06-23 15:36:11 -04:00
David Eads	6ccfc3aecf	add dynamic reloading for CSR signing controllers	2020-01-22 15:00:46 -05:00
Mike Danese	6a004d0c18	support URI SANs in local signer	2019-11-04 10:56:06 -08:00
Mike Danese	fe51712288	refactor into seperate authority package	2019-11-04 10:56:06 -08:00