bmwcarit / MoCOCrW

(mo)dern (c)++ (o)penssl (cr)ypto (w)rapper library

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Can not sign a certificate out of notBefore and notAfter validity.

lvella opened this issue · comments

The "sanity check" in CertificateAuthority::_signCSR() does not allow me to sign a certificate with expired validity or a certificate that will be valid in the future, because validation at the moment must succeed at the end of the function. Anything that is not valid at the moment of the signature can not be signed.