tls双向认证错误：java.security.cert.CertificateNotYetValidException: NotBefore: Tue Jan 12 19:18:08 CST 202

接上一篇

1、在虚拟机centos 7上，创建证书，配置EMQX，并启动，IP=192.168.21.46

没有做时间同步，注意：NotBefore时间

2、宿主机，windows ，IP=192.168.21.33

做了时间同步，和上面虚拟机时间不一致，client时间比server时间，要早几个小时；

导致，使用MQTT.fx，连接虚拟机上的emqx server时，双向认证，client验证server的证书，发现client当前时间，比server证书的notBefore时间还要早，报错：

2021-01-12 16:51:36,990  INFO --- BrokerConnectorController      : onConnect
2021-01-12 16:51:36,992  INFO --- ScriptsController              : Clear console.
2021-01-12 16:51:36,995  INFO --- MqttFX ClientModel             : MqttClient with ID MQTT_FX_Client assigned.
2021-01-12 16:51:37,025 ERROR --- MqttFX ClientModel             : Error when connecting
org.eclipse.paho.client.mqttv3.MqttException: MqttException
    at org.eclipse.paho.client.mqttv3.internal.ExceptionHelper.createMqttException(ExceptionHelper.java:38) ~[org.eclipse.paho.client.mqttv3-1.2.0.jar:?]
    at org.eclipse.paho.client.mqttv3.internal.ClientComms$ConnectBG.run(ClientComms.java:715) ~[org.eclipse.paho.client.mqttv3-1.2.0.jar:?]
    at java.util.concurrent.Executors$RunnableAdapter.call(Unknown Source) ~[?:1.8.0_181]
    at java.util.concurrent.FutureTask.run(Unknown Source) ~[?:1.8.0_181]
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(Unknown Source) ~[?:1.8.0_181]
    at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(Unknown Source) ~[?:1.8.0_181]
    at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:1.8.0_181]
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:1.8.0_181]
    at java.lang.Thread.run(Unknown Source) [?:1.8.0_181]
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.ssl.Alerts.getSSLException(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.Handshaker.fatalSE(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.Handshaker.fatalSE(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.Handshaker.processLoop(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.Handshaker.process_record(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source) ~[?:1.8.0_181]
    at org.eclipse.paho.client.mqttv3.internal.SSLNetworkModule.start(SSLNetworkModule.java:108) ~[org.eclipse.paho.client.mqttv3-1.2.0.jar:?]
    at org.eclipse.paho.client.mqttv3.internal.ClientComms$ConnectBG.run(ClientComms.java:701) ~[org.eclipse.paho.client.mqttv3-1.2.0.jar:?]
    ... 7 more
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
    at sun.security.validator.PKIXValidator.doValidate(Unknown Source) ~[?:1.8.0_181]
    at sun.security.validator.PKIXValidator.engineValidate(Unknown Source) ~[?:1.8.0_181]
    at sun.security.validator.Validator.validate(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source) ~[?:1.8.0_181]
    at sun.security.ssl.X509TrustManagerImpl