diff --git a/common/tls/std_client.go b/common/tls/std_client.go index 2a77ed0c..0f855228 100644 --- a/common/tls/std_client.go +++ b/common/tls/std_client.go @@ -87,13 +87,15 @@ func NewSTDClient(ctx context.Context, serverAddress string, options option.Outb tlsConfig.VerifyConnection = func(state tls.ConnectionState) error { verifyOptions := x509.VerifyOptions{ Roots: tlsConfig.RootCAs, - CurrentTime: tlsConfig.Time(), DNSName: serverName, Intermediates: x509.NewCertPool(), } for _, cert := range state.PeerCertificates[1:] { verifyOptions.Intermediates.AddCert(cert) } + if tlsConfig.Time != nil { + verifyOptions.CurrentTime = tlsConfig.Time() + } _, err := state.PeerCertificates[0].Verify(verifyOptions) return err }