candlepin/candlepin — pull request #9 by jmrodri (2012-06-18 17:53:16+00:00)
Title: 827035: regenerate identity certificate if within threshold

rhsmcertd will now request the consumer. If the consumer's
identity certificate expires withing the threshold, the server
will regenerate it before returning the consumer.

You can force candlepin to always regenerate by making the threshold to 20 years.
Use the candlepin.identityCert.threshold config entry and specify the length in DAYS. Use 7304 as a good value, if not specified it defaults to 90 days.