Miloslav Trmač 3c6335c572 Explicitly supply validity times to certificate generation ...

Add explicit startTime and endTime parameters to
cryptoservice.GenerateCertificate and trustmanager.NewCertificate.

trustmanager.NewCertificate as a low-level data manipulation function
should not be hard-coding policy (10-year expiration); that policy
belongs to its callers, or one more level higher to callers of
cryptoservice.GenerateCertificate.

These places hard-coding policy now also have an explict comment to
that effect.

In addition to conceptual cleanliness, this will allow writing tests
of certificate expiry by generating appropriate expired or nearly-expired
certificates.

Tests which don't care about the policy much will continue to use the
just added cryptoservice.GenerateTestingCertificate.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>

2015-12-09 20:02:10 +01:00

..

notary

Explicitly supply validity times to certificate generation

2015-12-09 20:02:10 +01:00

notary-server

Use the function to parse viper on server side

2015-12-09 09:17:25 +08:00

notary-signer

Add a function to parse viper

2015-12-09 09:17:24 +08:00