aipper/mkcert
1
0
Fork 0
mirror of https://github.com/FiloSottile/mkcert.git synced 2025-10-13 16:31:41 +08:00
Code Issues Packages Projects Releases Wiki Activity

Backdate notBefore to support macOS Catalina

Browse Source 
Updates #174
This commit is contained in:
Filippo Valsorda
2019-07-06 19:12:45 -03:00
parent 1f0796c926
commit df15e0c1ef
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
cert.go
View File

@@ -64,7 +64,13 @@ func (m *mkcert) makeCert(hosts []string) {
},
NotAfter: time.Now().AddDate(10, 0, 0),
NotBefore: time.Now(),
// Fix the notBefore to temporarily bypass macOS Catalina's limit on
// certificate lifespan. Once mkcert provides an ACME server, automation
// will be the recommended way to guarantee uninterrupted functionality,
// and the lifespan will be shortened to 825 days. See issue 174 and
// https://support.apple.com/en-us/HT210176.
NotBefore: time.Date(2019, time.June, 1, 0, 0, 0, 0, time.UTC),
KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
BasicConstraintsValid: true,