@camstack/system 1.2.433 → 1.2.434

package/dist/{x509.es-Dzl0BbmG.js → x509.es-r7Ht1thA.js}

@@ -1,4 +1,17 @@
 const require_chunk = require("./chunk-Cek0wNdY.js");
+//#region src/tls/cert-backdate.ts
+/**
+* How far a freshly issued certificate's `notBefore` is moved into the past.
+*
+* TLS refuses a certificate whose `notBefore` is in the verifier's future, and X.509 dates have
+* one-second resolution, so a certificate dated "now" fails the handshake on any peer whose clock
+* runs even slightly behind the issuer's. Expiry is always computed from the real `now`; only the
+* start of validity moves.
+*/
+var CERT_NOT_BEFORE_BACKDATE_MS = 5 * 6e4;
+function backdatedNotBefore(now) {
+	return /* @__PURE__ */ new Date(now.getTime() - CERT_NOT_BEFORE_BACKDATE_MS);
+}
 /*! *****************************************************************************
 Copyright (C) Microsoft. All rights reserved.
 Licensed under the Apache License, Version 2.0 (the "License"); you may not use
@@ -11972,6 +11985,12 @@ Object.defineProperty(exports, "X509CertificateGenerator", {
 		return X509CertificateGenerator;
 	}
 });
+Object.defineProperty(exports, "backdatedNotBefore", {
+	enumerable: true,
+	get: function() {
+		return backdatedNotBefore;
+	}
+});
 Object.defineProperty(exports, "cryptoProvider", {
 	enumerable: true,
 	get: function() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.433",
+  "version": "1.2.434",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",