cchandler / certificate_authority / 3

99%

Pull #38

travis-ci

Add last_update time offset option to crls

Using `Time.now` for the `last_update` field of the crls is problematic when validating clients clocks are out of sync. At least openssl refuses to validate a certificate when crl checking is enabled and the locally cached crl is not yet valid.
Therefore it is common practice to generate crls with a last_update timestamp that is slightly in the past.

3 of 3 new or added lines in 1 file covered. (100.0%)

1725 of 1823 relevant lines covered (94.62%)

25.57 hits per line