Re: Raspberry Pi startup: certificate is not yet valid

2022-05-12 Thread Gary E. Miller via devel
Yo Hal! On Wed, 11 May 2022 01:53:30 -0700 Hal Murray wrote: > > I like you suggestion of ntpd using "-g" to get the system time > > close, before checking any certificates. > > It was Richard's suggestion, not mine. The idea was to only skip the > date checks and do the rest of the

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-12 Thread countkase--- via devel
On Wednesday, May 11, 2022, 03:31:52 AM PDT, Hal Murray via devel wrote: > Thanks. > > I like you suggestion of ntpd using "-g" to get the system time close, >before > > checking any certificates. > It was Richard's suggestion, not mine.  The idea was to only skip the date checks and do

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-11 Thread Hal Murray via devel
Thanks. > I like you suggestion of ntpd using "-g" to get the system time close, before > checking any certificates. It was Richard's suggestion, not mine. The idea was to only skip the date checks and do the rest of the certificate checking. I don't like it for 2 reasons. The main

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-10 Thread Gary E. Miller via devel
Yo Hal! On Tue, 10 May 2022 10:26:08 -0700 Hal Murray wrote: > Gary said: > >> Should we do something like set the time to the time stamp of the > >> drift file? (if it is significantly newer than the current time) > > > Nope. Don't get in a fight with the OS. > > Could you please say

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-10 Thread Hal Murray via devel
Gary said: >> Should we do something like set the time to the time stamp of the >> drift file? (if it is significantly newer than the current time) > Nope. Don't get in a fight with the OS. Could you please say more. The whole purpose of ntpsec is to keep good time. If we know the clock is

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-09 Thread Gary E. Miller via devel
Yo Hal! On Mon, 09 May 2022 00:38:34 -0700 Hal Murray via devel wrote: > Does anybody know how the initial time gets set on a Raspberry Pi -- > before ntpd gets called? It depends. Some use swclock, some use ntpclient, some use an RTC, some use a GNSS time. > I have a recently setup system

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-09 Thread Hal Murray via devel
Richard Laager said: > I believe you're looking for "fake-hwclock". It periodically saves the time > to a file (allegedly* /etc/fake-hwclock.data) and restores it on boot. Thanks. I discovered fake-hwclock via Google but it wasn't on my system and the discussion I was looking at was very

Re: Raspberry Pi startup: certificate is not yet valid

2022-05-09 Thread Richard Laager via devel
On 5/9/22 02:38, Hal Murray via devel wrote: Does anybody know how the initial time gets set on a Raspberry Pi -- before ntpd gets called? I believe you're looking for "fake-hwclock". It periodically saves the time to a file (allegedly* /etc/fake-hwclock.data) and restores it on boot. * My