diff --git a/component/tls/reality.go b/component/tls/reality.go index 2de5c46e..cd6a4753 100644 --- a/component/tls/reality.go +++ b/component/tls/reality.go @@ -185,6 +185,7 @@ func (c *realityVerifier) VerifyPeerCertificate(rawCerts [][]byte, verifiedChain opts := x509.VerifyOptions{ DNSName: c.serverName, Intermediates: x509.NewCertPool(), + CurrentTime: ntp.Now(), } for _, cert := range certs[1:] { opts.Intermediates.AddCert(cert)