Use a fixed string for renewal token issuer.

2 years ago · 4e4d4e882f
parent 3694ba30dc
commit 4e4d4e882f
1 changed files with 1 additions and 1 deletions
--- a/authority/authorize.go
+++ b/authority/authorize.go
@ -399,7 +399,7 @@ func (a *Authority) AuthorizeRenewToken(ctx context.Context, ott string) (*x509.
 	}

 	if err := claims.ValidateWithLeeway(jose.Expected{
-		Issuer:  p.GetName(),
+		Issuer:  "step-ca-client/1.0",
 		Subject: leaf.Subject.CommonName,
 		Time:    time.Now().UTC(),
 	}, time.Minute); err != nil {