Mikrotik + OpenVPN cert from templat = invalid date

RouterOS General
1

Hi!

I’m using Mikrotik CCR for OpenVPN service, and starting from ROS 7.16 i’m getting strange behavior while creating or updating certs.
I use following template for user ovpn certs

name="ovpn-user-template" key-type=rsa common-name="user" key-size=2048 subject-alt-name="" days-valid=365 key-usage=tls-client akid="" skid="" invalid-before=1970-01-01 03:00:00 invalid-after=1970-01-01 03:00:00

While creating user cert from this template i get fields invalid-before/invalid-after updates incorrectly. Like that. Seems like a bug in ROS

name="test_user" digest-algorithm=sha256 key-type=rsa  common-name="test_user" key-size=2048 subject-alt-name="" days-valid=365 trusted=no key-usage=tls-client ca=RootCA serial-number="1AC2ADA049193A51" fingerprint="0bf3be6001e31f9837596c7d36bdff28a100bbb48fd6d646e78ef1a63c552998" akid=0c39a8574a2176efe39f7c1b5cba3ed90e182734 skid=d9cba8c57d3f8fad29ef36d25e2e29022a451f19 invalid-before=1970-01-01 06:00:00 invalid-after=1970-01-01 06:00:00
2

You’re not alone: http://forum.mikrotik.com/t/certificate-is-expired-after-signing-invalid-before-and-invalid-after-attribute-values-are-jan-1st-1970/180112/1

So far no one has provided any feedback regarding the workaround I’ve suggested there.