search

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.
https://www.dogtagpki.org
GNU General Public License v2.0
371 stars 137 forks source link

Higher values of "next update grace period" are adding an extra hour to CRL's NextUpdate #1143

Open pki-bot opened 4 years ago

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #573. Originally filed by nkinder (@nkinder) on 2013-03-26 04:50:33:

Higher values of "next update grace period" are adding an extra hour to CRL's NextUpdate on the top of specified offset.

This case requires more investigation but I saw an extra hour being added to CRL's NextUpdate for higher values of NextUpdateGracePeriod, for example

for NextUpdateGracePeriod set to 0 This Update: Friday, March 8, 2013 12:08:07 PM PST US/Pacific Next Update: Friday, March 8, 2013 1:00:00 PM PST US/Pacific

for NextUpdateGracePeriod set to 1440 (1 day) This Update: Friday, March 8, 2013 12:09:07 PM PST US/Pacific Next Update: Saturday, March 9, 2013 1:00:00 PM PST US/Pacific

for NextUpdateGracePeriod set to 2880 (2 days) This Update: Friday, March 8, 2013 12:10:50 PM PST US/Pacific Next Update: Sunday, March 10, 2013 2:00:00 PM PDT US/Pacific

pki-bot commented 4 years ago

Comment from awnuk (@awnuk) at 2013-10-01 21:38:33

Related to [[br]] https://bugzilla.redhat.com/show_bug.cgi?id=919556 [[br]] https://bugzilla.redhat.com/show_bug.cgi?id=919593

pki-bot commented 4 years ago

Comment from nkinder (@nkinder) at 2017-02-27 14:06:37

Metadata Update from @nkinder: