Jira (PUP-894) Too easy to hit "CRL not yet valid for " (and not very informative)

[Michelle Johansen (JIRA)]

Title: Message Title

Michelle Johansen commented on an issue   Re: Too easy to hit "CRL not yet valid for <host>" (and not very informative) Kylo Ginsberg Is this a requirement for 3.5.0? Add Comment   Puppet / PUP-894 Too easy to hit "CRL not yet valid for <host>" (and not very informative) Currently we set the CRL time range to start at 1 second in the past: https://github.com/puppetlabs/puppet/blob/a8311df5438601a3394d38e37f671626969d50db/lib/puppet/ssl/certificate_revocation_list.rb#L85 However, this creates a window where an agent with a small amount of clock skew can hit the `CRL not yet valid for <host>` message. This affects bo... This message was sent by Atlassian JIRA (v6.1.4#6159-sha1:44eaede) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To post to this group, send email to puppet-bugs@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-bugs. For more options, visit https://groups.google.com/groups/opt_out.