Occasionally, when I mint a new TLS client cert to talk to my cluster infrastructure, the cert is rejected…
Occasionally, when I mint a new TLS client cert to talk to my cluster infrastructure, the cert is rejected…: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). A common way to deal with this is to add a little slack to the NotBefore timestamp in the cert, e.g. put it…
The task
A common way to deal with this is to add a little slack to the NotBefore timestamp in the cert, e.g. put it 10-60s in the past (I've seen some folks suggest as much as 10 minutes). Vault should add such slack when issuing certificates.
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.