Commitd734f3f

authored

chore: reduce azure CA cert validity check period to 2 months (#12788)

Signed-off-by: Danny Kopping <danny@coder.com>

1 parent0288e73 commitd734f3fCopy full SHA for d734f3f

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -53,15 +53,17 @@ func TestValidate(t *testing.T) {`
`53`	`53`
`54`	`54`	`funcTestExpiresSoon(t*testing.T) {`
`55`	`55`	`t.Parallel()`
	`56`	`+constthreshold=2`
	`57`	`+`
`56`	`58`	`for_,c:=rangeazureidentity.Certificates {`
`57`	`59`	`block,rest:=pem.Decode([]byte(c))`
`58`	`60`	`require.Zero(t,len(rest))`
`59`	`61`	`cert,err:=x509.ParseCertificate(block.Bytes)`
`60`	`62`	`require.NoError(t,err)`
`61`	`63`
`62`		`-expiresSoon:=cert.NotAfter.Before(time.Now().AddDate(0,3,0))`
	`64`	`+expiresSoon:=cert.NotAfter.Before(time.Now().AddDate(0,threshold,0))`
`63`	`65`	`ifexpiresSoon {`
`64`		`-t.Errorf("certificate expires within6 months %s: %s",cert.NotAfter,cert.Subject.CommonName)`
	`66`	`+t.Errorf("certificate expires within%d months %s: %s",threshold,cert.NotAfter,cert.Subject.CommonName)`
`65`	`67`	`}else {`
`66`	`68`	`url:="no issuing url"`
`67`	`69`	`iflen(cert.IssuingCertificateURL)>0 {`

Comments

(0)