puppetlabs/puppet — pull request #887 by zaphod42 (2012-06-26 23:37:50+00:00)
Title: (Maint) Ensure CRL is valid at the time it is updated

This is a retarget of PR #838 at 3.0rc

Because openSSL says that a CRL is valid only at least one second after
it was last updated, setting the last_updated field to right now causes
the CRL to be not valid for one second. This was showing up as an
intermittent failure in our test cases.

The CRL is now always made to be last_updated one second ago so that it
is immediately valid.

In addition this pull request cleans up the tests and the implementation of the
CRL so that they should be easier to understand.