[Bug]: notBefore and notAfter values in template files are ignored

Aberta
#1,507 2 comentários 0 reações 1 responsável Ver no GitHub

Mantenedores costumam responder em até 1 dia

@hslatman já está trabalhando nisso.

Desde 11/11/2025.

Avaliação

Esta issue ainda não foi avaliada.

Descrição

bug needs triage
Steps to Reproduce

I was playing around with template files and noticed that the notBefore and notAfter values in template files are ignored by the step-cli.

You can easily reproduce it when you use the fields notBefore and/or notAfter in a template file and create a certificate. You can see an example in the Actual behavior section.

You can use this for testing:

{
  "notBefore": "2020-01-01T00:00:00Z",
  "notAfter": "2030-01-01T00:00:00Z"
}
Your Environment
  • OS - Fedora 42
  • step CLI Version - CLI/0.28.7 (linux/amd64)
Expected Behavior

When specifing the notBefore and/or notAfter fields I would expect that the dates will be carried over to the actual certificate. The fields are visible in the certificate.go.

Actual Behavior
Image

When specifing a wrong value you can see from the error that it actually reads the value:

Image
Additional Context

My use-case for this would be to create something like standalone cert-profiles that are fully defined as code and don't need the CLI parameters. Then you can just specify the parts that change like the Subject and SAN and then just have to add the template

Contributing

Vote on this issue by adding a 👍 reaction.
To contribute a fix for this issue, leave a comment (and link to your pull request, if you've opened one already).

Linguagem predominante
Go
Estrelas
4.3k
Forks
320
Merge médio
2d 3h
PRs com merge (30d)
11

Preparar o ambiente

Primeiros passos

  1. Leia a issue inteira e depois o guia de contribuição do projeto.
  2. Comente na issue dizendo que vai assumir — evita que duas pessoas façam o mesmo trabalho.
  3. Faça um fork do repositório e trabalhe em uma branch.
  4. Abra um pull request que referencie o número da issue.

Mais de smallstep/cli

Todas as issues de smallstep/cli

Issues semelhantes

Mais issues de Go

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.