smallstep / certificates

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
https://smallstep.com/certificates
Apache License 2.0
6.35k stars 415 forks source link

Add support for validities in templates #1903

Closed maraino closed 3 days ago

maraino commented 6 days ago

This commit upgrades go.step.sm/crypto with a version that adds support for setting validity bounds in templates. It also modifies the X.509 certificate modifiers to support them. SSH certificate modifiers should work without changes.

The priority for the validity bounds are:

  1. Coming from flags.
  2. Coming from the template.
  3. Defaults.

Requires: