Try to make cert valid at an earlier date

Author: Al-Azif

Dockerfile

@@ -3,10 +3,11 @@ FROM alpine:3.21.3
 RUN \
     # Update and install system applications
     apk add --update --no-cache \
-        bind-tools=9.18.34-r0 \
+        bind-tools=9.18.35-r0 \
         certbot=3.0.1-r0 \
         curl=8.12.1-r1 \
         libcap=2.71-r0 \
+        libfaketime=0.9.10-r3 \
         lua-resty-core=0.1.31-r0 \
         nginx=1.26.3-r0 \
         nginx-mod-http-fancyindex=1.26.3-r0 \

entrypoint.sh

@@ -233,7 +233,7 @@ for file in /etc/nginx/sites-available/*; do
 done
 
 # Generate snakeoil certs for domains found in hijacked domains (Up to 8 sections for the domain)
-openssl req -nodes -x509 -newkey rsa:4096 -keyout /etc/nginx/certs/private/snakeoil.key -out /etc/nginx/certs/snakeoil.crt -days 36500 -subj '/CN=*/CN=*.*/CN=*.*.*/CN=*.*.*.*/CN=*.*.*.*.*/CN=*.*.*.*.*.*/CN=*.*.*.*.*.*.*/CN=*.*.*.*.*.*.*.*' > /dev/null 2>&1
+LD_PRELOAD=src/libfaketime.so.1 FAKETIME="@1970-01-01 00:00:00" openssl req -nodes -x509 -newkey rsa:4096 -keyout /etc/nginx/certs/private/snakeoil.key -out /etc/nginx/certs/snakeoil.crt -days 36500 -subj '/CN=*/CN=*.*/CN=*.*.*/CN=*.*.*.*/CN=*.*.*.*.*/CN=*.*.*.*.*.*/CN=*.*.*.*.*.*.*/CN=*.*.*.*.*.*.*.*' > /dev/null 2>&1
 chmod 644 /etc/nginx/certs/snakeoil.crt
 chmod 640 /etc/nginx/certs/private/snakeoil.key