Fix renew of certificate at the start of the server.

4 years ago · 9f1d95d8bf
parent e855707dc2
commit 9f1d95d8bf
1 changed files with 1 additions and 0 deletions
--- a/ca/renew.go
+++ b/ca/renew.go
@ -51,6 +51,7 @@ func NewTLSRenewer(cert *tls.Certificate, fn RenewFunc, opts ...tlsRenewerOption
 	r := &TLSRenewer{
 		RenewCertificate: fn,
 		cert:             cert,
+		certNotAfter:     cert.Leaf.NotAfter.Add(-1 * time.Minute),
 	}

 	for _, f := range opts {