mirror of
https://github.com/mozilla/gecko-dev.git
synced 2025-03-02 06:22:20 +00:00
9c11fda65f
ca.pem is used to sign certificates that are either verified at time 2016-08-25 or time "now", with the earliest such certificate having a notBefore of 2015-07-24. As such, ca.pem.certspec needs to have a notBefore time that is no later than 2015-07-24, but be valid for a reasonably long time. Therefore, ca.pem.certspec is changed so the cert has a notBefore of 2015-01-01, and is valid for 20 years. ee-int-nsSGC-*.pem are verified at time 2016-08-25, and so need to be valid at that time. Therefore, the ee-int-nsSGC-*.pem.certspec files are changed so the corresponding certs have validity periods that match their intermediates. MozReview-Commit-ID: duOnvGGcuD --HG-- extra : amend_source : 307c9d95b617560a547081ff8924d05ec2f2d2a8