diff options
| author | luke <luke@980ebf18-57e1-0310-9a29-db15c13687c0> | 2007-03-30 23:45:48 +0000 |
|---|---|---|
| committer | luke <luke@980ebf18-57e1-0310-9a29-db15c13687c0> | 2007-03-30 23:45:48 +0000 |
| commit | f9d89b50139e7688e22525b26cd479f164927788 (patch) | |
| tree | ce90ba8412d0e29e30e531ac9e7bffcfbeaefce6 /lib | |
| parent | 4615e3a70cf53ba62a00d5d8f01a6d0ec9dffc26 (diff) | |
| download | puppet-f9d89b50139e7688e22525b26cd479f164927788.tar.gz puppet-f9d89b50139e7688e22525b26cd479f164927788.tar.xz puppet-f9d89b50139e7688e22525b26cd479f164927788.zip | |
Changing the date that certs are valid to start one day before the cert is created, so clocks that are off by a little bit can still be used.
git-svn-id: https://reductivelabs.com/svn/puppet/trunk@2376 980ebf18-57e1-0310-9a29-db15c13687c0
Diffstat (limited to 'lib')
| -rwxr-xr-x | lib/puppet/sslcertificates.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/lib/puppet/sslcertificates.rb b/lib/puppet/sslcertificates.rb index 503de7ae9..2f1f40b40 100755 --- a/lib/puppet/sslcertificates.rb +++ b/lib/puppet/sslcertificates.rb @@ -66,7 +66,9 @@ module Puppet::SSLCertificates } cert = OpenSSL::X509::Certificate.new - from = Time.now + # Make the certificate valid as of yesterday, because + # so many people's clocks are out of sync. + from = Time.now - (60*60*24) cert.subject = hash[:name] if hash[:issuer] |