openziti / edge

Application-embedded connectivity and zero-trust components
Apache License 2.0
74 stars 19 forks source link

remove enrollment tokens `not before` #1607

Closed andrewpmartinez closed 1 year ago

andrewpmartinez commented 1 year ago

Enrollment tokens do not support future provisioning, and specifying a not before attribute can cause issues with small time discrepancies during automated deployments (quickstart, production) and testing. The not before attribute is always set to time.Now() removing should improve usability without sacrificing security.