Optional "when"

diff --git a/go/pki/cmd/sigtool/main.go b/go/pki/cmd/sigtool/main.go
index c8077e296ea30ad1b4a468bce2dc81ff6f8c059da52908b2dd1e3c56d1fcafa8..7446e3145e3154b0796b8b96de9d575b23f94a127c307ababe98b061484afd49 100644 (file)
--- a/go/pki/cmd/sigtool/main.go
+++ b/go/pki/cmd/sigtool/main.go
@@ -46,6 +46,7 @@ func main() {
        encryptedBindingHex := flag.String("encrypted-binding", "",
                "Set/check encrypted-binding, UUID")
        detached := flag.Bool("detached", false, "Detached data mode")
+       noWhen := flag.Bool("no-when", false, `Do not include "when"`)
 
        flag.Parse()
        log.SetFlags(log.Lshortfile)
@@ -202,8 +203,11 @@ func main() {
                }
                var signed pki.Signed
                signed.Load.T = *typ
-               when := time.Now().UTC().Truncate(time.Millisecond)
-               sigTbs := pki.SigTBS{When: &when}
+               var sigTbs pki.SigTBS
+               if !*noWhen {
+                       when := time.Now().UTC().Truncate(time.Millisecond)
+                       sigTbs.When = &when
+               }
                if encryptedBinding != uuid.Nil {
                        sigTbs.EncryptedBinding = &encryptedBinding
                }