initca: Fill out NotBefore/NotAfter ts from the cert request

This way users can pass these in so the csr and certificate end up with the wanted dates.
cloudflare · Jan 30, 2023 · 5fd4c43 · 5fd4c43
1 parent bdadff2
commit 5fd4c43
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/initca/initca.go b/initca/initca.go
@@ -93,7 +93,12 @@ func New(req *csr.CertificateRequest) (cert, csrPEM, key []byte, err error) {
 		return
 	}
 
-	signReq := signer.SignRequest{Hosts: req.Hosts, Request: string(csrPEM)}
+	signReq := signer.SignRequest{
+		Hosts:     req.Hosts,
+		Request:   string(csrPEM),
+		NotBefore: req.CA.NotBefore,
+		NotAfter:  req.CA.NotAfter,
+	}
 	cert, err = s.Sign(signReq)
 
 	return