fix ssh validity modifier

5 years ago · 3ff410c695
parent 1c8f610ca9
commit 3ff410c695
1 changed files with 1 additions and 1 deletions
--- a/authority/provisioner/sign_ssh_options.go
+++ b/authority/provisioner/sign_ssh_options.go
@ -193,7 +193,7 @@ func (m *sshCertificateValidityModifier) Modify(cert *ssh.Certificate) error {

 	diff := time.Duration(cert.ValidBefore-cert.ValidAfter) * time.Second
 	switch {
-	case diff < max:
+	case diff < min:
 		return errors.Errorf("ssh certificate duration cannot be lower than %s", min)
 	case diff > max:
 		return errors.Errorf("ssh certificate duration cannot be greater than %s", max)