Hi, we just entered DST here in Czech Republic, and my CA started generating certificates with a +1h offset: ssh-keygen -U -s some-ca-key.pub -V 20220328110400:20220328112400 -I 981-20220328-1104 -O extension:login@xxxxxxxxxx=someone@xxxxxxxxxx -I eed3f7c7-4809-46e7-892e-6e3642da59c8 438.pub Signed user key 438-cert.pub: id "eed3f7c7-4809-46e7-892e-6e3642da59c8 " serial 0 valid from 2022-03-28T12:04:00 to 2022-03-28T12:24:00 $ date Mon Mar 28 11:21:25 CEST 2022 $ ls -la /etc/localtime lrwxrwxrwx. 1 root root 35 Jun 8 2020 /etc/localtime -> ../usr/share/zoneinfo/Europe/Prague As a workaround, I set /usr/share/zoneinfo/Etc/GMT-1 as a timezone, but this is clearly not right. Any plans to fix this? Apparently I am not the only person who encountered it https://github.com/cloudtools/ssh-ca/blob/master/ssh_ca/utils.py#L72 <https://github.com/cloudtools/ssh-ca/blob/master/ssh_ca/utils.py#L72> Thanks Jan _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev